- Command execution is bounded
node child_process (plugins/ruflo-metaharness/scripts/_darwin.mjs:35) - Command execution is bounded
synchronous shell execution (plugins/ruflo-metaharness/scripts/_darwin.mjs:80) - Command execution is bounded
node child_process (plugins/ruflo-metaharness/scripts/_harness.mjs:42) - Command execution is bounded
synchronous shell execution (plugins/ruflo-metaharness/scripts/_harness.mjs:192) - Licence and provenance
no LICENCE file at the root (.) - URL handling
Read by hand on 2026-09-30: Its browser tools navigate to any URL they are given, internal addresses included. On your own machine that is a browser tool's job; the row exists for servers that run somewhere shared.
A verdict is not a property of the software alone
Tell us what you handle and how it runs. We will show you the findings that bear on it, word for word as published, and say plainly where we have nothing to offer.
What is true of your situation?
We need to know every host it contacts. An undeclared destination is not automatically malicious, but it is a hole in the review somebody signed off on. Answered by Declared egress, URL handling.
It runs somewhere other things also run. What it can execute stops being its own business the moment it shares a filesystem or a network with something else. Answered by Command execution is bounded, Tool description integrity.
More than one customer's data is behind it. Isolation between tenants fails quietly: nothing errors, the wrong rows simply come back to the wrong person. Answered by Authentication enforced, Row-level security, Object-level authorisation, CORS configuration.
We have a dependency and licence policy. Most of what you install is not what the maker wrote, and a licence you cannot meet is as blocking as a vulnerability. Answered by Dependency advisories, Licence and provenance.
987 of 990 listings have been examined, so those are the ones we can answer for. 408 of them have something published that bears on what you told us. The other 3 we have never looked at, and no amount of selecting here will change that.
We found something that bears on you408
Published on the listing already. Repeated here because you said it matters.
- Command execution is bounded
node child_process (examples/rpc-extension-ui.ts:17) - Command execution is bounded
node child_process (examples/extensions/interactive-shell.ts:23) - Command execution is bounded
synchronous shell execution (examples/extensions/interactive-shell.ts:165) - Command execution is bounded
node child_process (examples/extensions/mac-system-theme.ts:8) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (schema.json:1761) - Command execution is bounded
node child_process (scripts/run-binary.js:11) - Command execution is bounded
synchronous shell execution (scripts/run-binary.js:227) - Command execution is bounded
node child_process (scripts/run-binary.test.js:5) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (install.js:11) - Command execution is bounded
synchronous shell execution (install.js:61) - Command execution is bounded
node child_process (platform.js:8) - Command execution is bounded
synchronous shell execution (platform.js:49) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/ensemble-model-compare.js:11) - Command execution is bounded
synchronous shell execution (scripts/ensemble-model-compare.js:88) - Command execution is bounded
node child_process (scripts/hybrid-model-compare.js:12) - Command execution is bounded
synchronous shell execution (scripts/hybrid-model-compare.js:102) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/utils/auto-inject-setup.ts:5) - Command execution is bounded
synchronous shell execution (src/utils/auto-inject-setup.ts:149) - Command execution is bounded
synchronous shell execution (src/utils/auto-inject-setup.ts:156) - Command execution is bounded
node child_process (src/utils/auto-language-detect.ts:3) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (pi/advice.ts:1) - Command execution is bounded
synchronous shell execution (pi/advice.ts:6) - Command execution is bounded
node child_process (pi/permission-gate.ts:1) - Command execution is bounded
synchronous shell execution (pi/permission-gate.ts:8) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (download.js:13) - Command execution is bounded
synchronous shell execution (download.js:30) - Command execution is bounded
node child_process (download.js:114) - Command execution is bounded
node child_process (download.js:166) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/build-mcpb.mjs:9) - Command execution is bounded
synchronous shell execution (scripts/build-mcpb.mjs:19) - Command execution is bounded
synchronous shell execution (scripts/build-mcpb.mjs:38) - Command execution is bounded
synchronous shell execution (scripts/build-mcpb.mjs:50) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/run-tests.js:22) - Command execution is bounded
synchronous shell execution (scripts/run-tests.js:54) - Command execution is bounded
node child_process (lib/install.js:16) - Command execution is bounded
synchronous shell execution (lib/install.js:84) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin.js:8) - Command execution is bounded
synchronous shell execution (bin.js:23) - Command execution is bounded
synchronous shell execution (bin.js:34) - Command execution is bounded
synchronous shell execution (bin.js:56) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/postinstall.mjs:5) - Command execution is bounded
synchronous shell execution (scripts/postinstall.mjs:42) - Command execution is bounded
synchronous shell execution (scripts/postinstall.mjs:54) - Command execution is bounded
node child_process (bin/sem.js:3) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
dynamic Function constructor (wasm/ruv_swarm_wasm.js:2004) - Command execution is bounded
dynamic Function constructor (wasm/wasm-bindings-loader.mjs:243) - Command execution is bounded
dynamic Function constructor (wasm/wasm-bindings-loader.mjs:257) - Command execution is bounded
node child_process (src/hooks/index.js:8) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (lib/download.js:13) - Command execution is bounded
synchronous shell execution (lib/download.js:142) - Command execution is bounded
synchronous shell execution (lib/download.js:152) - Command execution is bounded
node child_process (lib/run.js:13) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/codegraph-daemon.js:14) - Command execution is bounded
node child_process (bin/codegraph-mcp.js:4) - Command execution is bounded
node child_process (bin/postinstall.js:7) - Command execution is bounded
synchronous shell execution (bin/postinstall.js:89) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:17) - Command execution is bounded
synchronous shell execution (index.js:1356) - Command execution is bounded
dynamic Function constructor (extension/background.js:3509) - Command execution is bounded
dynamic Function constructor (extension/background.js:3541) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:35) - Command execution is bounded
node child_process (lib/install.js:174) - Command execution is bounded
synchronous shell execution (lib/install.js:180) - Command execution is bounded
synchronous shell execution (lib/install.js:209) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/install.js:5) - Command execution is bounded
synchronous shell execution (scripts/install.js:206) - Command execution is bounded
node child_process (bin/remem.js:5) - Command execution is bounded
synchronous shell execution (bin/remem.js:25) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (package.json:32) - Command execution is bounded
synchronous shell execution (package.json:32) - Command execution is bounded
node child_process (bin/postinstall-mneme-lite.cjs:42) - Command execution is bounded
synchronous shell execution (bin/postinstall-mneme-lite.cjs:186) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (tsup.config.ts:25) - Command execution is bounded
synchronous shell execution (tsup.config.ts:29) - Command execution is bounded
node child_process (src/mcp.schema-gaps.test.ts:23) - Command execution is bounded
node child_process (src/parity_live.test.ts:120) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (build.js:3) - Command execution is bounded
node child_process (src/core/oauth.js:5) - Command execution is bounded
node child_process (src/core/oauth.ts:5) - Command execution is bounded
node child_process (skills/headless/entry/bootstrap.mjs:7)
- Command execution is bounded
node child_process (scripts/check-anti-slop.mjs:61) - Command execution is bounded
synchronous shell execution (scripts/check-anti-slop.mjs:121) - Command execution is bounded
node child_process (scripts/check-blog-staleness.mjs:33) - Command execution is bounded
synchronous shell execution (scripts/check-blog-staleness.mjs:66)
- Command execution is bounded
dynamic Function constructor (wasm/quic/agentic_flow_quic.js:540) - Command execution is bounded
node child_process (validation/docker/test-reasoningbank-npx.mjs:12) - Command execution is bounded
node child_process (scripts/claude:8) - Command execution is bounded
node child_process (scripts/claude-flow:10)
- Command execution is bounded
node child_process (test-calendar-fix.js:6) - Command execution is bounded
node child_process (bin/modules/generate-mcp-tools.mjs:3) - Command execution is bounded
synchronous shell execution (bin/modules/generate-mcp-tools.mjs:28) - Command execution is bounded
synchronous shell execution (bin/modules/generate-mcp-tools.mjs:75)
- Command execution is bounded
node child_process (test/playwright/unit/hooks/codexLaneStateStopHook.spec.mjs:2) - Command execution is bounded
node child_process (test/playwright/unit/hooks/laneStateStopHook.spec.mjs:5) - Command execution is bounded
node child_process (test/playwright/unit/ai/ensureAgentRepoGit.spec.mjs:2) - Command execution is bounded
synchronous shell execution (test/playwright/unit/ai/ensureAgentRepoGit.spec.mjs:20)
- Command execution is bounded
node child_process (scripts/build.ts:16) - Command execution is bounded
node child_process (scripts/check-framework-antipatterns.ts:41) - Command execution is bounded
node child_process (scripts/check-skill-versions.ts:32) - Command execution is bounded
synchronous shell execution (scripts/check-skill-versions.ts:65)
- Command execution is bounded
node child_process (tools/verify-hermes-citations.mjs:26) - Command execution is bounded
node child_process (tools/workspace/migration-tool.mjs:140) - Command execution is bounded
synchronous shell execution (tools/workspace/migration-tool.mjs:146) - Command execution is bounded
synchronous shell execution (tools/workspace/migration-tool.mjs:151)
- Command execution is bounded
node child_process (package.json:117) - Command execution is bounded
synchronous shell execution (package.json:117) - Command execution is bounded
node child_process (scripts/postinstall.mjs:11) - Command execution is bounded
synchronous shell execution (scripts/postinstall.mjs:95)
- Command execution is bounded
eval (README.md:285) - Command execution is bounded
node child_process (scripts/understand-analyze.mjs:34) - Command execution is bounded
synchronous shell execution (scripts/understand-analyze.mjs:321) - Command execution is bounded
synchronous shell execution (scripts/understand-analyze.mjs:341)
- Command execution is bounded
python subprocess (install.py:176) - Command execution is bounded
python subprocess (install.py:312) - Command execution is bounded
python subprocess (install.py:318) - Command execution is bounded
python subprocess (install.py:324)
- Command execution is bounded
node child_process (src/index.ts:109) - Command execution is bounded
node child_process (src/self-contained-pack.test.ts:6) - Command execution is bounded
synchronous shell execution (src/self-contained-pack.test.ts:88) - Command execution is bounded
node child_process (src/stdio-startup.test.ts:6)
- Command execution is bounded
node child_process (README.md:1477) - Command execution is bounded
synchronous shell execution (README.md:1481) - Command execution is bounded
node child_process (scripts/postinstall.js:17) - Command execution is bounded
synchronous shell execution (scripts/postinstall.js:27)
- Command execution is bounded
node child_process (tests/export-cursor-kiro-skill-notice.test.mjs:12) - Command execution is bounded
synchronous shell execution (tests/export-cursor-kiro-skill-notice.test.mjs:28) - Command execution is bounded
node child_process (tests/test-codex-plugin-marketplace-install.test.mjs:33) - Command execution is bounded
synchronous shell execution (tests/test-codex-plugin-marketplace-install.test.mjs:61)
- Command execution is bounded
node child_process (npm/install.js:2) - Command execution is bounded
synchronous shell execution (npm/install.js:13) - Command execution is bounded
node child_process (npm/bin/whatshell.js:2) - Command execution is bounded
synchronous shell execution (npm/bin/whatshell.js:17)
- Command execution is bounded
synchronous shell execution (src/utils/open.ts:21) - Command execution is bounded
eval (src/tools/browser/frames.ts:281) - Command execution is bounded
eval (src/tools/browser/frames.ts:290) - Command execution is bounded
eval (src/tools/browser/frames.ts:299)
- Command execution is bounded
eval (LEARNINGS.md:768) - Command execution is bounded
eval (LEARNINGS.md:833) - Command execution is bounded
node child_process (README.md:207) - Command execution is bounded
node child_process (SECURITY.md:31)
- Command execution is bounded
node child_process (image-resize-worker.js:184) - Command execution is bounded
synchronous shell execution (image-resize-worker.js:207) - Command execution is bounded
node child_process (image-resize-worker.js:1779) - Command execution is bounded
synchronous shell execution (image-resize-worker.js:1863)
- Command execution is bounded
node child_process (plugins/youtube/youtube.js:7) - Command execution is bounded
node child_process (plugins/vnc/spawn.js:6) - Command execution is bounded
node child_process (lib/launcher.js:5) - Command execution is bounded
node child_process (lib/windows-processes.js:1)
- Command execution is bounded
node child_process (postinstall.mjs:3) - Command execution is bounded
synchronous shell execution (postinstall.mjs:45) - Command execution is bounded
synchronous shell execution (postinstall.mjs:62) - Command execution is bounded
synchronous shell execution (postinstall.mjs:90)
- Command execution is bounded
node child_process (upgrades/0.28.62.md:8) - Command execution is bounded
synchronous shell execution (upgrades/0.28.70.md:15) - Command execution is bounded
synchronous shell execution (upgrades/0.28.70.md:16) - Command execution is bounded
synchronous shell execution (upgrades/1.2.26.md:28)
- Command execution is bounded
node child_process (postinstall.mjs:60) - Command execution is bounded
synchronous shell execution (postinstall.mjs:60) - Command execution is bounded
synchronous shell execution (packages/shared-skills/skills/visual-qa/scripts/cli.test.ts:68) - Command execution is bounded
python subprocess (packages/shared-skills/skills/ultimate-browsing/scripts/cookie_crypto.py:49)
- Command execution is bounded
node child_process (src/tracing/instrumentation/process/childProcess.js:9) - Command execution is bounded
node child_process (src/tracing/instrumentation/process/childProcess.js:51) - Command execution is bounded
node child_process (src/tracing/instrumentation/process/childProcess.js:56) - Command execution is bounded
node child_process (src/tracing/instrumentation/process/childProcess.js:83)
- Command execution is bounded
node child_process (postinstall.mjs:60) - Command execution is bounded
synchronous shell execution (postinstall.mjs:60) - Command execution is bounded
synchronous shell execution (packages/shared-skills/skills/visual-qa/scripts/cli.test.ts:68) - Command execution is bounded
python subprocess (packages/shared-skills/skills/ultimate-browsing/scripts/cookie_crypto.py:49)
- Command execution is bounded
node child_process (cli-wrapper.cjs:9) - Command execution is bounded
synchronous shell execution (cli-wrapper.cjs:73) - Command execution is bounded
synchronous shell execution (cli-wrapper.cjs:133) - Command execution is bounded
node child_process (install.cjs:14)
- Command execution is bounded
node child_process (lib/shared/processConcurrency.js:34) - Command execution is bounded
node child_process (lib/shared/processConcurrency.js:50) - Command execution is bounded
node child_process (lib/core/packager/copyToClipboardIfEnabled.js:1) - Command execution is bounded
node child_process (lib/core/git/gitCommand.d.ts:1)
- Command execution is bounded
node child_process (cli-entry.js:309) - Command execution is bounded
synchronous shell execution (cli-entry.js:354) - Command execution is bounded
synchronous shell execution (cli-entry.js:382) - Command execution is bounded
synchronous shell execution (cli-entry.js:387)
- Command execution is bounded
node child_process (scripts/build.mjs:2) - Command execution is bounded
synchronous shell execution (scripts/build.mjs:10) - Command execution is bounded
synchronous shell execution (scripts/build.mjs:48) - Command execution is bounded
node child_process (scripts/package-smoke.mjs:2)
- Command execution is bounded
node child_process (src/vectra-cli.generate.spec.ts:5) - Command execution is bounded
synchronous shell execution (src/vectra-cli.generate.spec.ts:25) - Command execution is bounded
synchronous shell execution (src/vectra-cli.generate.spec.ts:63) - Command execution is bounded
node child_process (src/vectra-cli.ts:605)
- Command execution is bounded
python subprocess (assets/skills/ui-styling/scripts/shadcn_add.py:126) - Command execution is bounded
python subprocess (assets/skills/ui-styling/scripts/shadcn_add.py:172) - Command execution is bounded
python subprocess (assets/skills/design-system/scripts/slide-token-validator.py:30) - Command execution is bounded
python subprocess (assets/skills/design-system/scripts/tests/test_validate_tokens.py:24)
- Command execution is bounded
node child_process (src/service-manager-probe.ts:21) - Command execution is bounded
synchronous shell execution (src/service-manager-probe.ts:150) - Command execution is bounded
synchronous shell execution (src/service-manager-probe.ts:166) - Command execution is bounded
node child_process (src/update/index.ts:1)
- Command execution is bounded
node child_process (bin/amplitude-ai-instrument.mjs:13) - Command execution is bounded
synchronous shell execution (bin/amplitude-ai-instrument.mjs:43) - Command execution is bounded
node child_process (bin/amplitude-ai.mjs:4) - Command execution is bounded
synchronous shell execution (bin/amplitude-ai.mjs:56)
- Command execution is bounded
node child_process (lib/aoe.js:23) - Command execution is bounded
synchronous shell execution (lib/aoe.js:224) - Command execution is bounded
node child_process (lib/chatgpt-install.js:5) - Command execution is bounded
node child_process (lib/chatgpt-spend.js:5)
- Command execution is bounded
node child_process (template/scripts/install-playwright-cli-browsers.js:12) - Command execution is bounded
synchronous shell execution (template/scripts/install-playwright-cli-browsers.js:97) - Command execution is bounded
synchronous shell execution (template/scripts/install-playwright-cli-browsers.js:106) - Command execution is bounded
python subprocess (template/.github/skills/skill-creator/scripts/improve_description.py:35)
- Command execution is bounded
node child_process (index.js:10) - Command execution is bounded
synchronous shell execution (index.js:156) - Command execution is bounded
synchronous shell execution (index.js:176) - Command execution is bounded
synchronous shell execution (index.js:180)
- Command execution is bounded
node child_process (claude-plugin/scripts/auto-update.js:3) - Command execution is bounded
synchronous shell execution (claude-plugin/scripts/auto-update.js:641) - Command execution is bounded
synchronous shell execution (claude-plugin/scripts/auto-update.js:664) - Command execution is bounded
node child_process (claude-plugin/scripts/cg-answer.js:21)
- Command execution is bounded
node child_process (CHANGELOG.md:822) - Command execution is bounded
node child_process (README.md:92) - Command execution is bounded
node child_process (README.md:222) - Command execution is bounded
node child_process (bin/postgres-mcp.mjs:145)
- Command execution is bounded
node child_process (src/cli.js:11) - Command execution is bounded
node child_process (scripts/token-cli.js:162) - Command execution is bounded
synchronous shell execution (scripts/token-cli.js:186) - Command execution is bounded
synchronous shell execution (scripts/token-cli.js:187)
- Command execution is bounded
node child_process (README.md:261) - Command execution is bounded
eval (README.md:323) - Command execution is bounded
node child_process (bin/aws-mcp.mjs:94) - Command execution is bounded
synchronous shell execution (bin/aws-mcp.mjs:182)
- Command execution is bounded
node child_process (src/utils/CliUtils.ts:1) - Command execution is bounded
eval (src/agent/runtime/ivm/IVMSandboxManager.ts:117) - Command execution is bounded
eval (src/agent/runtime/ivm/IVMSandboxManager.ts:143) - Command execution is bounded
eval (src/agent/runtime/ivm/IVMSandboxManager.ts:193)
- Command execution is bounded
node child_process (binary-install.js:9) - Command execution is bounded
synchronous shell execution (binary-install.js:243) - Command execution is bounded
synchronous shell execution (binary-install.js:270) - Command execution is bounded
synchronous shell execution (binary-install.js:282)
- Command execution is bounded
node child_process (src/git.ts:1) - Command execution is bounded
synchronous shell execution (src/git.ts:17) - Command execution is bounded
node child_process (src/tools/skill-helpers.ts:1) - Command execution is bounded
synchronous shell execution (src/tools/skill-helpers.ts:78)
- Command execution is bounded
node child_process (bin/cli.js:3) - Command execution is bounded
synchronous shell execution (bin/cli.js:12) - Command execution is bounded
synchronous shell execution (bin/cli.js:20) - Command execution is bounded
synchronous shell execution (bin/cli.js:61)
- Command execution is bounded
node child_process (tests/cli.test.ts:5) - Command execution is bounded
synchronous shell execution (tests/cli.test.ts:12) - Command execution is bounded
node child_process (src/init.ts:12) - Command execution is bounded
synchronous shell execution (src/init.ts:59)
- Command execution is bounded
python subprocess (tests/test_import_boundaries.py:16) - Command execution is bounded
python subprocess (tests/test_release_metadata.py:216) - Command execution is bounded
python subprocess (scripts/smoke_installed_wheel.py:190) - Command execution is bounded
python subprocess (scripts/smoke_installed_wheel.py:197)
- Command execution is bounded
python subprocess (tests/e2e/e2e_integration_test.py:240) - Command execution is bounded
python subprocess (tests/e2e/e2e_integration_test.py:282) - Command execution is bounded
python subprocess (tests/e2e/e2e_integration_test.py:439) - Command execution is bounded
python subprocess (tests/e2e/e2e_integration_test.py:3133)
- Command execution is bounded
python subprocess (tests/repo_generation_tool/conftest.py:259) - Command execution is bounded
python subprocess (tests/repo_generation_tool/conftest.py:289) - Command execution is bounded
python subprocess (tests/repo_generation_tool/unit/test_filter_expression_codegen.py:23) - Command execution is bounded
python subprocess (tests/repo_generation_tool/unit/test_filter_expression_codegen.py:188)
- Command execution is bounded
python subprocess (tests/test_mcp_server.py:121) - Command execution is bounded
python subprocess (tests/test_mcp_server.py:147) - Command execution is bounded
python subprocess (tests/test_package.py:39) - Command execution is bounded
python subprocess (mcp_kql_server/kql_auth.py:58)
- Command execution is bounded
python subprocess (project_conventions.py:111) - Command execution is bounded
python subprocess (run_in_venv.py:341) - Command execution is bounded
python subprocess (run_in_venv.py:367) - Command execution is bounded
python subprocess (run_in_venv.py:387)
- Command execution is bounded
python subprocess (aceflow_mcp_server/contract_tools.py:84) - Command execution is bounded
python subprocess (aceflow_mcp_server/contract_tools.py:212) - Command execution is bounded
python subprocess (aceflow_mcp_server/contract_tools.py:438) - Command execution is bounded
python subprocess (aceflow_mcp_server/contract_tools.py:517)
- Command execution is bounded
python subprocess (scripts/build_docs.py:150) - Command execution is bounded
python subprocess (scripts/build_docs.py:1170) - Command execution is bounded
node child_process (scripts/mcp_endpoint_manager.py:372) - Command execution is bounded
python subprocess (mcp_platform/tools/base_probe.py:661)
- Command execution is bounded
python subprocess (tests/test_cli_entrypoint.py:33) - Command execution is bounded
python subprocess (tests/test_cli_entrypoint.py:60) - Command execution is bounded
python subprocess (tests/test_cli_entrypoint.py:86) - Command execution is bounded
python subprocess (tests/test_cli_entrypoint.py:109)
- Command execution is bounded
python subprocess (CLAUDE.md:59) - Command execution is bounded
python subprocess (specs/003-rg-fd-eza/data-model.md:181) - Command execution is bounded
python subprocess (specs/003-rg-fd-eza/data-model.md:227) - Command execution is bounded
python subprocess (specs/003-rg-fd-eza/quickstart.md:254)
- Command execution is bounded
python subprocess (src/sensei_mcp/server.py:457) - Command execution is bounded
python subprocess (src/sensei_mcp/server.py:467) - Command execution is bounded
python subprocess (src/sensei_mcp/server.py:483) - Command execution is bounded
python subprocess (src/sensei_mcp/server.py:491)
- Command execution is bounded
python subprocess (PKG-INFO:461) - Command execution is bounded
python subprocess (README.md:421) - Command execution is bounded
python subprocess (tests/run_all_tests.py:103) - Command execution is bounded
python subprocess (tests/run_all_tests.py:148)
- Command execution is bounded
eval (PKG-INFO:947) - Command execution is bounded
dynamic Function constructor (PKG-INFO:947) - Command execution is bounded
eval (README.md:907) - Command execution is bounded
dynamic Function constructor (README.md:907)
- Command execution is bounded
python subprocess (src/chromium_sync/passphrase_setup.py:73) - Command execution is bounded
python subprocess (src/chromium_sync/passphrase_setup.py:204) - Command execution is bounded
python subprocess (src/chromium_sync/passphrase_setup.py:280) - Command execution is bounded
python subprocess (src/chromium_sync/passphrase_setup.py:406)
- Command execution is bounded
python subprocess (kubectl_mcp_tool/crd_detector.py:93) - Command execution is bounded
python subprocess (kubectl_mcp_tool/crd_detector.py:143) - Command execution is bounded
python subprocess (kubectl_mcp_tool/diagnostics.py:20) - Command execution is bounded
python subprocess (kubectl_mcp_tool/diagnostics.py:255)
- Command execution is bounded
python subprocess (src/mcp_maker/core/generator.py:137) - Command execution is bounded
python subprocess (src/mcp_maker/core/git_utils.py:10) - Command execution is bounded
python subprocess (src/mcp_maker/core/git_utils.py:28) - Command execution is bounded
python subprocess (src/mcp_maker/core/git_utils.py:54)
- Command execution is bounded
python subprocess (tests/test_cli.py:8) - Command execution is bounded
python subprocess (tests/test_cli.py:19) - Command execution is bounded
python subprocess (tests/test_e2e_mcp.py:138) - Command execution is bounded
python subprocess (tests/test_e2e_mcp.py:235)
- Command execution is bounded
python subprocess (tools/tach_docs.py:16) - Command execution is bounded
python subprocess (tests/test_startup_performance.py:40) - Command execution is bounded
python subprocess (tests/test_startup_performance.py:54) - Command execution is bounded
python subprocess (src/mcp_workspace/git_operations/verification.py:74)
- Command execution is bounded
python subprocess (tests/conftest.py:32) - Command execution is bounded
python subprocess (tests/conftest.py:38) - Command execution is bounded
python subprocess (src/berth/server.py:527) - Command execution is bounded
python subprocess (src/berth/server.py:546)
- Command execution is bounded
python subprocess (tests/test_load_env_sh.py:38) - Command execution is bounded
python subprocess (tests/test_load_env_sh.py:135) - Command execution is bounded
python subprocess (tests/mock/conftest.py:83) - Command execution is bounded
python subprocess (scripts/generate_unraid_api_reference.py:201)
- Command execution is bounded
python subprocess (tests/test_adapter_local_store.py:39) - Command execution is bounded
python subprocess (tests/test_adapter_local_store.py:42) - Command execution is bounded
python subprocess (tests/test_adapter_local_store.py:46) - Command execution is bounded
python subprocess (tests/test_adapter_local_store.py:50)
- Command execution is bounded
python subprocess (tests/test_e2e.py:149) - Command execution is bounded
python subprocess (memory_map_mcp/server.py:333) - Command execution is bounded
python subprocess (memory_map_mcp/server.py:338) - Command execution is bounded
python subprocess (benchmarks/bench_retrieval.py:291)
- Command execution is bounded
node child_process (vscode-extension/src/extension.ts:1) - Command execution is bounded
node child_process (vscode-extension/scripts/package-vsix.cjs:2) - Command execution is bounded
synchronous shell execution (vscode-extension/scripts/package-vsix.cjs:17) - Command execution is bounded
python subprocess (tests/test_export_tools_json.py:10)
- Command execution is bounded
node child_process (standalone/firepit.js:71) - Command execution is bounded
node child_process (standalone/firepit.js:1024) - Command execution is bounded
node child_process (standalone/runtime.js:48) - Command execution is bounded
node child_process (standalone/runtime.js:75)
- Command execution is bounded
node child_process (wrapper_dist/common.js:15) - Command execution is bounded
node child_process (test/util/prepareEnvironment.ts:2) - Command execution is bounded
node child_process (test/util/prepareEnvironment.ts:55) - Command execution is bounded
synchronous shell execution (test/util/prepareEnvironment.ts:55)
- Command execution is bounded
node child_process (CHANGELOG.md:1258) - Command execution is bounded
node child_process (src/server.ts:4357) - Command execution is bounded
node child_process (src/server.ts:4406) - Command execution is bounded
node child_process (src/server.ts:4475)
- Command execution is bounded
node child_process (src/study/adjudication.ts:1) - Command execution is bounded
node child_process (src/study/runner.ts:1) - Command execution is bounded
node child_process (src/memory/github-pr.ts:1) - Command execution is bounded
synchronous shell execution (src/memory/github-pr.ts:26)
- Command execution is bounded
node child_process (templates/community/dora-metrics/report.mjs:3) - Command execution is bounded
synchronous shell execution (templates/community/dora-metrics/report.mjs:58) - Command execution is bounded
dynamic Function constructor (src/workflows/wait-filter.ts:213) - Command execution is bounded
dynamic Function constructor (src/workflows/executors/code-match.ts:50)
- Command execution is bounded
eval (rules/public-core/haiec-ai-security.yml:224) - Command execution is bounded
python os.system (rules/public-core/haiec-ai-security.yml:226) - Command execution is bounded
python os.system (rules/public-core/haiec-ai-security.yml:240) - Command execution is bounded
python subprocess (rules/public-core/haiec-ai-security.yml:241)
- Command execution is bounded
node child_process (lib/server.js:1894) - Command execution is bounded
dynamic Function constructor (lib/server.js:2973) - Command execution is bounded
dynamic Function constructor (lib/server.js:7037) - Command execution is bounded
node child_process (lib/show-trace.js:7)
- Command execution is bounded
python subprocess (scripts/bench-edit-latency.sh:59) - Command execution is bounded
python subprocess (scripts/bench-hash-gate-large.sh:58) - Command execution is bounded
python subprocess (scripts/bench-hash-gate-v2.sh:22) - Command execution is bounded
python subprocess (scripts/bench-hash-gate.sh:79)
- Command execution is bounded
node child_process (src/agent-runtime.js:4) - Command execution is bounded
synchronous shell execution (src/agent-runtime.js:197) - Command execution is bounded
synchronous shell execution (src/agent-runtime.js:321) - Command execution is bounded
synchronous shell execution (src/agent-runtime.js:468)
- Command execution is bounded
python subprocess (web-app/server.py:622) - Command execution is bounded
python subprocess (web-app/server.py:656) - Command execution is bounded
python subprocess (web-app/server.py:680) - Command execution is bounded
python subprocess (web-app/server.py:1016)
- Command execution is bounded
node child_process (skills/roast-my-design-system/scripts/mcp/server.mjs:19) - Command execution is bounded
synchronous shell execution (skills/roast-my-design-system/scripts/mcp/server.mjs:107) - Command execution is bounded
node child_process (skills/roast-my-design-system/scripts/mcp/tools.mjs:9) - Command execution is bounded
synchronous shell execution (skills/roast-my-design-system/scripts/mcp/tools.mjs:283)
- Command execution is bounded
node child_process (lib/browserContextFactory.js:17) - Command execution is bounded
dynamic Function constructor (lib/tools/evaluate.js:58) - Command execution is bounded
node child_process (lib/tools/install.js:16) - Command execution is bounded
node child_process (lib/extension/cdpRelay.js:23)
- Command execution is bounded
node child_process (web/build-skills.mjs:175) - Command execution is bounded
synchronous shell execution (web/build-skills.mjs:180) - Command execution is bounded
synchronous shell execution (web/build-skills.mjs:186) - Command execution is bounded
node child_process (skills/skill-security-auditor/SKILL.md:31)
- Command execution is bounded
node child_process (index.js:24) - Command execution is bounded
synchronous shell execution (index.js:249) - Command execution is bounded
synchronous shell execution (index.js:252) - Command execution is bounded
node child_process (index.js:1099)
- Command execution is bounded
node child_process (scripts/test-one.js:2) - Command execution is bounded
synchronous shell execution (scripts/test-one.js:11) - Command execution is bounded
node child_process (cli/index.js:1) - Command execution is bounded
node child_process (cli/run.test.js:3)
- Command execution is bounded
eval (README.md:1504) - Command execution is bounded
dynamic Function constructor (README.md:1505) - Command execution is bounded
node child_process (scripts/build-claude-desktop.mjs:5) - Command execution is bounded
python subprocess (scripts/build-workflow-starter-kit.py:24)
- Command execution is bounded
node child_process (cli.js:10) - Command execution is bounded
synchronous shell execution (cli.js:339) - Command execution is bounded
synchronous shell execution (cli.js:344) - Command execution is bounded
synchronous shell execution (cli.js:349)
- Command execution is bounded
node child_process (templates/hooks/opencode-ark-write-gate.mjs:16) - Command execution is bounded
synchronous shell execution (templates/hooks/opencode-ark-write-gate.mjs:72) - Command execution is bounded
eval (docs/package-surface.md:57) - Command execution is bounded
node child_process (docs/package-surface.md:59)
- Command execution is bounded
node child_process (cli-wrapper.mjs:17) - Command execution is bounded
node child_process (ucr/adapter-sdk.mjs:2) - Command execution is bounded
synchronous shell execution (ucr/adapter-sdk.mjs:184) - Command execution is bounded
node child_process (ucr/codex-app-server.mjs:1)
- Command execution is bounded
node child_process (lib/agent.js:8) - Command execution is bounded
node child_process (lib/api-engine.js:14) - Command execution is bounded
synchronous shell execution (lib/api-engine.js:44) - Command execution is bounded
synchronous shell execution (lib/api-engine.js:74)
- Command execution is bounded
node child_process (scripts/postinstall-interactive.js:223) - Command execution is bounded
synchronous shell execution (scripts/postinstall-interactive.js:230) - Command execution is bounded
synchronous shell execution (scripts/postinstall-interactive.js:239) - Command execution is bounded
node child_process (scripts/postinstall.js:15)
- Command execution is bounded
node child_process (omp-cache.mjs:26) - Command execution is bounded
node child_process (tokscale_analytics.mjs:31) - Command execution is bounded
node child_process (tools/_helpers.mjs:10) - Command execution is bounded
synchronous shell execution (tools/_helpers.mjs:128)
- Command execution is bounded
node child_process (scripts/postinstall.js:19) - Command execution is bounded
synchronous shell execution (scripts/postinstall.js:92) - Command execution is bounded
node child_process (bin/cli.js:13) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (lib/cli_entry.js:6) - Command execution is bounded
node child_process (lib/daemon_version.js:4) - Command execution is bounded
node child_process (lib/install.js:11) - Command execution is bounded
node child_process (lib/postinstall_setup.js:11)
- Command execution is bounded
node child_process (utils/base.js:8) - Command execution is bounded
synchronous shell execution (utils/base.js:23) - Command execution is bounded
node child_process (utils/btp.js:18) - Command execution is bounded
node child_process (utils/btp.js:33)
- Command execution is bounded
node child_process (build.js:3) - Command execution is bounded
node child_process (src/core/oauth.js:5) - Command execution is bounded
node child_process (src/core/oauth.ts:5) - Command execution is bounded
node child_process (skills/headless/entry/bootstrap.mjs:7)
- Command execution is bounded
python subprocess (templates/nexo_helper.py:145) - Command execution is bounded
python subprocess (templates/nexo_helper.py:293) - Command execution is bounded
python subprocess (templates/nexo_helper.py:360) - Command execution is bounded
python subprocess (templates/skill-script-template.py:36)
- Command execution is bounded
node child_process (install.js:4) - Command execution is bounded
synchronous shell execution (install.js:98) - Command execution is bounded
synchronous shell execution (install.js:100) - Command execution is bounded
synchronous shell execution (install.js:146)
- Command execution is bounded
node child_process (src/hooks-system.js:8) - Command execution is bounded
node child_process (src/index.js:468) - Command execution is bounded
node child_process (src/index.js:940) - Command execution is bounded
synchronous shell execution (src/index.js:941)
- Command execution is bounded
node child_process (cli/ensure-skills.mjs:16) - Command execution is bounded
synchronous shell execution (cli/ensure-skills.mjs:37) - Command execution is bounded
synchronous shell execution (cli/ensure-skills.mjs:39) - Command execution is bounded
synchronous shell execution (cli/ensure-skills.mjs:182)
- Command execution is bounded
node child_process (src/mcp-server.js:5) - Command execution is bounded
node child_process (src/utils/alias-notice.js:103) - Command execution is bounded
node child_process (src/utils/claude-register.js:24) - Command execution is bounded
synchronous shell execution (src/utils/claude-register.js:177)
- Command execution is bounded
node child_process (package.json:98) - Command execution is bounded
synchronous shell execution (package.json:98) - Command execution is bounded
node child_process (package.json:99) - Command execution is bounded
synchronous shell execution (package.json:99)
- Command execution is bounded
node child_process (codemap/build.mjs:41) - Command execution is bounded
synchronous shell execution (codemap/build.mjs:78) - Command execution is bounded
synchronous shell execution (codemap/build.mjs:193) - Command execution is bounded
synchronous shell execution (codemap/build.mjs:194)
- Command execution is bounded
node child_process (src/cli.mjs:18) - Command execution is bounded
node child_process (src/install-browser.mjs:13) - Command execution is bounded
node child_process (src/mcp.mjs:24) - Command execution is bounded
node child_process (src/server.mjs:25)
- Command execution is bounded
node child_process (core/analysis.js:12) - Command execution is bounded
synchronous shell execution (core/analysis.js:1978) - Command execution is bounded
synchronous shell execution (core/analysis.js:1999) - Command execution is bounded
synchronous shell execution (core/analysis.js:2046)
- Command execution is bounded
node child_process (src/workspace/isolation.js:7) - Command execution is bounded
synchronous shell execution (src/workspace/isolation.js:26) - Command execution is bounded
synchronous shell execution (src/workspace/isolation.js:108) - Command execution is bounded
synchronous shell execution (src/workspace/isolation.js:110)
- Command execution is bounded
node child_process (src/budget.mjs:7) - Command execution is bounded
synchronous shell execution (src/budget.mjs:65) - Command execution is bounded
node child_process (src/check.mjs:8) - Command execution is bounded
synchronous shell execution (src/check.mjs:253)
- Command execution is bounded
node child_process (lib/services/auth/loginFlow.js:11) - Command execution is bounded
node child_process (lib/mcp/update/updateChecker.js:11) - Command execution is bounded
synchronous shell execution (lib/mcp/update/updateChecker.js:163) - Command execution is bounded
node child_process (lib/mcp/tools/sfSpawn.d.ts:3)
- Command execution is bounded
node child_process (bin.js:2) - Command execution is bounded
node child_process (src/doctor.js:4) - Command execution is bounded
synchronous shell execution (src/doctor.js:77) - Command execution is bounded
node child_process (src/login.js:1)
- Command execution is bounded
node child_process (src/cli.js:1591) - Command execution is bounded
synchronous shell execution (src/cli.js:1597) - Command execution is bounded
node child_process (src/engine.js:14) - Command execution is bounded
node child_process (src/index.js:2)
- Command execution is bounded
node child_process (lib/connect.mjs:18) - Command execution is bounded
node child_process (lib/select.mjs:40) - Command execution is bounded
synchronous shell execution (lib/select.mjs:78) - Command execution is bounded
node child_process (lib/share.mjs:46)
- Command execution is bounded
node child_process (src/bench.mjs:27) - Command execution is bounded
node child_process (src/brain-evidence.mjs:7) - Command execution is bounded
synchronous shell execution (src/brain-evidence.mjs:67) - Command execution is bounded
synchronous shell execution (src/brain-evidence.mjs:75)
- Command execution is bounded
node child_process (src/cli/stdio.mjs:16) - Command execution is bounded
synchronous shell execution (src/cli/stdio.mjs:170) - Command execution is bounded
node child_process (server/runtime.mjs:20) - Command execution is bounded
node child_process (bin/rn-devtools-hub.mjs:12)
- Command execution is bounded
node child_process (bin/cli.mjs:98) - Command execution is bounded
synchronous shell execution (bin/cli.mjs:133) - Command execution is bounded
synchronous shell execution (bin/cli.mjs:198) - Command execution is bounded
node child_process (bin/cli.mjs:527)
- Command execution is bounded
node child_process (src/cli.js:8) - Command execution is bounded
synchronous shell execution (src/cli.js:483) - Command execution is bounded
synchronous shell execution (src/cli.js:510) - Command execution is bounded
synchronous shell execution (src/cli.js:535)
- Command execution is bounded
node child_process (CHANGELOG.md:153) - Command execution is bounded
node child_process (bin/fetch-mcp.mjs:145) - Command execution is bounded
synchronous shell execution (bin/fetch-mcp.mjs:248) - Command execution is bounded
synchronous shell execution (bin/fetch-mcp.mjs:264)
- Command execution is bounded
node child_process (tests/runner.test.ts:3) - Command execution is bounded
node child_process (tests/runner.test.ts:12) - Command execution is bounded
node child_process (src/runner.ts:1) - Command execution is bounded
node child_process (src/runner.ts:384)
- Command execution is bounded
node child_process (scripts/capture-demo-video.ts:21) - Command execution is bounded
synchronous shell execution (scripts/capture-demo-video.ts:183) - Command execution is bounded
synchronous shell execution (scripts/capture-demo-video.ts:247) - Command execution is bounded
node child_process (scripts/capture-readme-screenshots.ts:13)
- Command execution is bounded
node child_process (scripts/package-plugin.mjs:14) - Command execution is bounded
synchronous shell execution (scripts/package-plugin.mjs:25) - Command execution is bounded
synchronous shell execution (scripts/package-plugin.mjs:36) - Command execution is bounded
node child_process (scripts/sync-skills.mjs:22)
- Command execution is bounded
node child_process (scripts/smoke-tarball.mjs:11) - Command execution is bounded
synchronous shell execution (scripts/smoke-tarball.mjs:19) - Command execution is bounded
node child_process (scripts/sync-repository-metadata.mjs:3) - Command execution is bounded
synchronous shell execution (scripts/sync-repository-metadata.mjs:11)
- Command execution is bounded
dynamic Function constructor (tests/pages-functions-process-free.test.ts:59) - Command execution is bounded
node child_process (tests/published-docs-lint.test.ts:11) - Command execution is bounded
synchronous shell execution (tests/published-docs-lint.test.ts:150) - Command execution is bounded
node child_process (tests/stdio-server.test.ts:10)
- Command execution is bounded
eval (Makefile:165) - Command execution is bounded
eval (Makefile:171) - Command execution is bounded
eval (Makefile:183) - Command execution is bounded
python subprocess (backend/tests/test_claude_hooks_contract.py:101)
- Command execution is bounded
node child_process (import_aafa.js:2) - Command execution is bounded
synchronous shell execution (import_aafa.js:39) - Command execution is bounded
node child_process (import_ca_cosmetics.js:2) - Command execution is bounded
synchronous shell execution (import_ca_cosmetics.js:56)
- Command execution is bounded
node child_process (tests/agentLink.test.ts:8) - Command execution is bounded
node child_process (tests/checkUpgradeLocal.test.ts:9) - Command execution is bounded
synchronous shell execution (tests/checkUpgradeLocal.test.ts:43) - Command execution is bounded
node child_process (tests/fixDiff.test.ts:1)
- Command execution is bounded
node child_process (index.js:183) - Command execution is bounded
synchronous shell execution (index.js:201) - Command execution is bounded
synchronous shell execution (index.js:206)
- Command execution is bounded
eval (resources/docs/1.136.11/fe1a6dba940e479fb7c3bc753f92b28c.md:36) - Command execution is bounded
eval (resources/docs/1.136.11/fe1a6dba940e479fb7c3bc753f92b28c.md:38) - Command execution is bounded
dynamic Function constructor (resources/docs/1.136.11/fe1a6dba940e479fb7c3bc753f92b28c.md:40)
- Command execution is bounded
node child_process (index.js:9) - Command execution is bounded
synchronous shell execution (index.js:93) - Command execution is bounded
synchronous shell execution (index.js:102)
- Command execution is bounded
node child_process (bin/inf.cjs:5) - Command execution is bounded
synchronous shell execution (bin/inf.cjs:53) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (esm/setup.js:8) - Command execution is bounded
synchronous shell execution (esm/setup.js:61) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (test-mcp-drive.cjs:1) - Command execution is bounded
node child_process (test-mcp-drive.js:1) - Command execution is bounded
node child_process (test-search.cjs:1)
- Command execution is bounded
node child_process (src/index.js:12) - Command execution is bounded
node child_process (src/test.js:1) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (start-server.js:3) - Command execution is bounded
node child_process (bin/cli.js:2) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (start-server.js:3) - Command execution is bounded
node child_process (bin/cli.js:3) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:3) - Command execution is bounded
synchronous shell execution (index.js:19) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (knowledge_mcp/shell.py:236) - Command execution is bounded
python os.system (knowledge_mcp/shell.py:400) - Command execution is bounded
python subprocess (knowledge_mcp/shell.py:474)
- Command execution is bounded
python subprocess (tests/test_server.py:12) - Command execution is bounded
python subprocess (tests/test_server.py:27) - Command execution is bounded
python subprocess (tests/test_server.py:43)
- Command execution is bounded
python subprocess (scripts/bump_version.py:31) - Command execution is bounded
python subprocess (scripts/gen_changelog.py:26) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (lib.js:10) - Command execution is bounded
synchronous shell execution (lib.js:105) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/setup-mcp-config.js:8) - Command execution is bounded
synchronous shell execution (scripts/setup-mcp-config.js:43) - Command execution is bounded
synchronous shell execution (scripts/setup-mcp-config.js:74)
- Command execution is bounded
node child_process (assets/docs/guide/plugins/print-ready-pdf.md:426) - Command execution is bounded
synchronous shell execution (assets/docs/guide/plugins/print-ready-pdf.md:429) - Command execution is bounded
synchronous shell execution (assets/docs/guide/plugins/print-ready-pdf.md:435)
- Command execution is bounded
node child_process (src/index.js:12) - Command execution is bounded
synchronous shell execution (src/index.js:802) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:43) - Command execution is bounded
synchronous shell execution (index.js:49) - Command execution is bounded
synchronous shell execution (index.js:58)
- Command execution is bounded
dynamic Function constructor (README.md:50) - Command execution is bounded
dynamic Function constructor (plugin/skills/code-auditor/SKILL-RULE-KINDS.md:122) - Command execution is bounded
dynamic Function constructor (plugin/skills/code-auditor/SKILL-RULE-KINDS.md:123)
- Command execution is bounded
node child_process (test/conformance.js:15) - Command execution is bounded
synchronous shell execution (test/conformance.js:118) - Command execution is bounded
node child_process (src/engines/proxy.js:25)
- Command execution is bounded
node child_process (README.md:735) - Command execution is bounded
node child_process (bin/tailscale-mcp.mjs:120) - Command execution is bounded
synchronous shell execution (bin/tailscale-mcp.mjs:224)
- Command execution is bounded
node child_process (bin/deja:3) - Command execution is bounded
synchronous shell execution (bin/deja:20) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/dryrun.js:9) - Command execution is bounded
synchronous shell execution (bin/dryrun.js:48) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (README.md:102) - Command execution is bounded
node child_process (README.zh-CN.md:102)
- Command execution is bounded
node child_process (bin/index.js:5) - Command execution is bounded
synchronous shell execution (bin/index.js:64)
- Command execution is bounded
node child_process (launcher/launcher.ts:3) - Command execution is bounded
synchronous shell execution (launcher/launcher.ts:26)
- Command execution is bounded
node child_process (src/index.js:10) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/auth.ts:11) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (docs/terminal-platform.md:13) - Command execution is bounded
node child_process (docs/testing.md:227)
- Licence and provenance
no LICENCE file at the root (.) - Authentication enforced
Read by hand on 2026-09-30: The HTTP transport, switched on with TRANSPORT_MODE=http, listens on every network interface with open CORS and no authentication, and acts with the operator's Atlassian token. The default, stdio, is not affected.
- Command execution is bounded
node child_process (bin/ctxlint.mjs:102) - Command execution is bounded
synchronous shell execution (bin/ctxlint.mjs:196)
- Command execution is bounded
node child_process (bin/codex.js:4) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/invoke.js:1) - Command execution is bounded
synchronous shell execution (bin/invoke.js:11)
- Command execution is bounded
node child_process (bin/workctl.js:5) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/cline:14) - Command execution is bounded
synchronous shell execution (bin/cline:69)
- Command execution is bounded
node child_process (README.md:1067) - Command execution is bounded
node child_process (README.md:1167)
- Command execution is bounded
node child_process (package.json:154) - Command execution is bounded
synchronous shell execution (package.json:154)
- Command execution is bounded
node child_process (scripts/run.js:2) - Command execution is bounded
synchronous shell execution (scripts/run.js:46)
- Command execution is bounded
node child_process (README.md:1501) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (package.json:167) - Command execution is bounded
synchronous shell execution (package.json:167)
- Command execution is bounded
node child_process (index.mjs:58) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (CHANGELOG.md:578) - Command execution is bounded
node child_process (CHANGELOG.md:579)
- Command execution is bounded
node child_process (scripts/prepare.mjs:8) - Command execution is bounded
synchronous shell execution (scripts/prepare.mjs:18)
- Command execution is bounded
node child_process (bin/index.js:3) - Command execution is bounded
synchronous shell execution (bin/index.js:23)
- Command execution is bounded
node child_process (index.js:22) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/run_tools_sse.js:1) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/tools/git.ts:1) - Command execution is bounded
node child_process (src/tools/system.ts:3)
- Command execution is bounded
Read by hand on 2026-09-30: Tool arguments such as the pod name and namespace are written into shell command strings run with execSync. That is the pattern the original package fixed in version 2.5.0 (CVE-2025-53355); this fork still has it. The automated scan missed it because it does not read dist/, which is the only code the package ships. - Authentication enforced
Read by hand on 2026-09-30: The SSE transport, switched on with ENABLE_UNSAFE_SSE_TRANSPORT, listens on every interface with no authentication. Its own comment calls it unsafe.
- Command execution is bounded
python subprocess (dxt/prepare-DXT.py:100) - Command execution is bounded
python subprocess (dxt/prepare-DXT.py:109)
- Command execution is bounded
python subprocess (kubernetes_mcp_server/kubernetes_mcp_server.py:82) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (tests/test_clean_tool_schema.py:152) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (tests/run_all_tests.py:47) - Command execution is bounded
python subprocess (tests/test_fastmcp_metadata.py:271)
- Command execution is bounded
python subprocess (podman_mcp_server/podman_mcp_server.py:85) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (.github/scripts/uv-lock-pre-commit.cjs:10) - Command execution is bounded
synchronous shell execution (.github/scripts/uv-lock-pre-commit.cjs:15)
- Command execution is bounded
python subprocess (tests/test_dxt_build.py:45) - Command execution is bounded
python subprocess (tests/test_dxt_build.py:62)
- Command execution is bounded
python subprocess (CLAUDE.md:85) - Command execution is bounded
python subprocess (tests/integration/test_stdin_monitoring_fix.py:47)
- Command execution is bounded
python subprocess (src/gnosis_mcp/clients.py:575) - Command execution is bounded
python subprocess (src/gnosis_mcp/clients.py:805)
- Command execution is bounded
python subprocess (tests/test_release_notes.py:100) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (doctor.py:86) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (install.py:34) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
eval (browser_tools.js:285) - Command execution is bounded
eval (browser_tools.js:306)
- Command execution is bounded
node child_process (bin/dynoxide:6) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (tooling/md1-benchmark.mjs:2) - Command execution is bounded
synchronous shell execution (tooling/md1-benchmark.mjs:146)
- Command execution is bounded
node child_process (src/index.js:4) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (claude/run-stdio.mjs:5) - Command execution is bounded
eval (.cursor-plugin/plugin.json:4)
- Command execution is bounded
node child_process (scripts/postinstall.mjs:6) - Command execution is bounded
synchronous shell execution (scripts/postinstall.mjs:41)
- Command execution is bounded
python subprocess (README.md:284) - Command execution is bounded
python subprocess (README.md:314)
- Command execution is bounded
node child_process (bin/kepta.js:1434) - Command execution is bounded
node child_process (bin/kepta.js:2809)
- Command execution is bounded
node child_process (index.js:6) - Command execution is bounded
synchronous shell execution (index.js:637)
- Command execution is bounded
node child_process (bin/run.js:1) - Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (skills/deepbom/scripts/verify-deepbom.mjs:3) - Command execution is bounded
synchronous shell execution (skills/deepbom/scripts/verify-deepbom.mjs:76)
- Command execution is bounded
node child_process (src/core/config/scripts/newMinorVersion.mjs:15) - Command execution is bounded
synchronous shell execution (src/core/config/scripts/newMinorVersion.mjs:50)
- Command execution is bounded
node child_process (bin/crbro.mjs:120) - Command execution is bounded
synchronous shell execution (bin/crbro.mjs:131)
- Command execution is bounded
node child_process (package.json:42) - Command execution is bounded
synchronous shell execution (package.json:42)
- Command execution is bounded
node child_process (docs/automatic-ci-integration.md:18) - Command execution is bounded
synchronous shell execution (docs/automatic-ci-integration.md:18)
- Command execution is bounded
node child_process (bin/mcp-compliance.mjs:108) - Command execution is bounded
synchronous shell execution (bin/mcp-compliance.mjs:202)
- Command execution is bounded
node child_process (bin/caddy-mcp.mjs:138) - Command execution is bounded
synchronous shell execution (bin/caddy-mcp.mjs:245)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:5)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:5)
- Command execution is bounded
node child_process (index.js:5)
- Command execution is bounded
node child_process (.docs/reference/workspace/local-sandbox.md:121)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/index.js:3)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/dbx-mcp-server.js:3)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:10)
- Command execution is bounded
node child_process (npm-loader.js:7)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
synchronous shell execution (src/db.ts:24)
- Command execution is bounded
node child_process (scripts/postinstall/reach.mjs:29)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (README.md:230)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (README.md:42)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (index.js:26)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/core/vendors.js:1)
- Command execution is bounded
eval (figma-desktop-bridge/code.js:519)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/core/spawn.ts:1)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (src/index.ts:16)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/postgres-mcp.js:11)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
eval (README.md:189)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/mcp-server-docker.js:3)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/scrobblercontext-mcp:3)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (src/mysql_mcp_server/server.py:93)
- Command execution is bounded
python subprocess (src/salesforce/server.py:149)
- Command execution is bounded
python subprocess (arduino_cli_mcp/main.py:205)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (archive/setup.py:15)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (test_mcp_server.py:16)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (src/code_review_mcp/providers.py:500)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (chronicle_mcp/cli.py:152)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- URL handling
Read by hand on 2026-09-30: zen_navigate and the tab tools open any URL, internal addresses included. A browser on your own machine is meant to; the row exists for servers that run somewhere shared.
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (tests/test_release_metadata.py:139)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (src/wredis_mcp/server.py:517)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/argent-simulator-server.cjs:9)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (bin/hermoso.mjs:438)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
dynamic Function constructor (src/core/ActionExecutor.js:1269)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (scripts/dev/browse.py:569)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (lib/core.js:14)
- Command execution is bounded
node child_process (npm/launcher.mjs:2)
- Command execution is bounded
node child_process (bin/apiguru-mcp.mjs:26)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (scripts/control-path-canary.cjs:2)
- Command execution is bounded
node child_process (bin/run-native.mjs:1)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (test.mjs:2)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
eval (bin/server.js:9)
- Command execution is bounded
eval (bin/server.js:9)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
eval (bin/server.js:10)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (CHANGELOG.md:390)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
node child_process (smoke-test.mjs:16)
- Command execution is bounded
node child_process (index.mjs:16)
- Licence and provenance
no LICENCE file at the root (.)
- Licence and provenance
no LICENCE file at the root (.)
- Command execution is bounded
python subprocess (tests/test_request_auth.py:201)
- Command execution is bounded
python subprocess (examples/retail-demo/runner.py:291)
We cannot answer for these3
Never examined. Not a clean result, an absent one, and it is here above the clean results rather than below them for that reason.
Nothing else. Nobody has read it, run it, or checked who wrote it. Treat it exactly as you would a repository you found yourself.
Nothing else. Nobody has read it, run it, or checked who wrote it. Treat it exactly as you would a repository you found yourself.
Nothing else. Nobody has read it, run it, or checked who wrote it. Treat it exactly as you would a repository you found yourself.
We checked these and found nothing579
Against the checks your selection names, and nothing else. Every other limit on the listing still applies.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Row-level security, Object-level authorisation, CORS configuration, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.
Checked: Declared egress, URL handling, Command execution is bounded, Tool description integrity, Authentication enforced, Dependency advisories, Licence and provenance.