{"name":"io.github.zorcec/vibeflow","slug":"zorcec-vibeflow","title":"Vibeflow","description":"Kanban for agentic development over MCP — annotate any UI element into a ticket with file and line.","url":"https://mcp.market/server/zorcec-vibeflow","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":37,"stars":2,"forks":0,"downloads_week":813,"last_push_at":"2026-10-13T23:04:04.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/zorcec/vibeflow","website":"https://www.vibeflow.tools","version":"0.19.3","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@vibeflow-tools/cli","version":"0.19.3","runtimeHint":"npx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Skip npx's install confirmation prompt.","type":"named","name":"-y"}],"packageArguments":[{"description":"Run the MCP server over stdio.","type":"named","name":"mcp"},{"description":"Project root this server serves. Required, and resolved once at startup: one process serves exactly one repository, so every tool call reads and writes that project's task store. Point it at your own repo.","isRequired":true,"format":"filepath","placeholder":"/path/to/project","type":"named","name":"--project"}]}],"tools":[],"scan":{"score":85,"grade":"A","scanned_at":"2026-10-13T23:17:11.585Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-13T23:17:11.584Z","components":{"code":{"score":20,"max":25,"notes":["55 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/chunk-Q7LKPFTH.js: …ch('${a}').then(r=>r.text()).then(code=>eval(code));`:`var s=document.createElement('…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@vibeflow-tools/cli","version":"0.19.3","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":14,"publishedAt":"2026-10-07T20:16:05.014Z","repositoryUrl":"git+https://github.com/zorcec/vibeflow.git","weeklyDownloads":813}],"repo":{"found":true,"owner":"zorcec","repo":"vibeflow","archived":false,"pushedAt":"2026-10-13T23:04:04Z","stars":2,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/5141264?v=4","ownerCreatedAt":"2013-08-01T19:27:47Z","license":"Apache-2.0"},"icon":{"url":"https://www.vibeflow.tools/assets/favicon.svg","source":"site"},"presence":{"stars":2,"forks":0,"downloadsWeek":813,"license":"Apache-2.0","lastPushAt":"2026-10-13T23:04:04.000Z","score":37}}}},"grade_history":[],"reviews":[]}