← Back to search

coding-friend-cli

GitHub Actions Scanned 28d ago

CLI for coding-friend — host learning docs, setup MCP server, initialize projects

npm
C
68.2 / 100

Versions

1.38.4latest
Jul 24, 2026
1.38.3
Jul 24, 2026
1.38.2
Jul 4, 2026
1.38.1
Jun 15, 2026
1.38.0
Jun 14, 2026
+ show 76 moreshow less
1.37.0
Jun 13, 2026
1.36.4
Jun 7, 2026
1.36.3
Jun 6, 2026
1.36.2
Jun 6, 2026
1.36.1
Jun 3, 2026
1.36.0
May 29, 2026
1.35.8
May 28, 2026
1.35.7
May 20, 2026
1.35.6
May 16, 2026
1.35.5
May 14, 2026
1.35.4
May 5, 2026
1.35.3
May 5, 2026
1.35.2
May 5, 2026
1.35.1
May 3, 2026
1.35.0
May 3, 2026
1.34.1
Apr 30, 2026
1.34.0
Apr 29, 2026
1.33.1
Apr 28, 2026
1.33.0
Apr 28, 2026
1.32.2
Apr 23, 2026
1.32.1
Apr 20, 2026
1.32.0
Apr 19, 2026
1.31.3
Apr 17, 2026
1.31.2
Apr 14, 2026
1.31.1
Apr 11, 2026
1.31.0
Apr 6, 2026
1.30.0
Apr 6, 2026
1.29.0
Apr 6, 2026
1.28.0
Apr 5, 2026
1.27.2
Mar 31, 2026
1.27.1
Mar 31, 2026
1.27.0
Mar 29, 2026
1.26.1
Mar 26, 2026
1.26.0
Mar 26, 2026
1.25.0
Mar 26, 2026
1.24.0
Mar 26, 2026
1.23.0
Mar 26, 2026
1.22.0
Mar 24, 2026
1.21.1
Mar 24, 2026
1.21.0
Mar 23, 2026
1.20.2
Mar 22, 2026
1.20.1
Mar 21, 2026
1.20.0
Mar 21, 2026
1.19.0
Mar 20, 2026
1.18.0
Mar 19, 2026
1.17.4
Mar 19, 2026
1.17.2
Mar 17, 2026
1.17.1
Mar 17, 2026
1.17.0
Mar 16, 2026
1.16.0
Mar 13, 2026
1.15.0
Mar 10, 2026
1.14.0
Mar 10, 2026
1.13.0
Mar 9, 2026
1.12.1
Mar 9, 2026
1.12.0
Mar 9, 2026
1.11.0
Mar 8, 2026
1.10.0
Mar 8, 2026
1.9.1
Mar 8, 2026
1.9.0
Mar 7, 2026
1.8.0
Mar 7, 2026
1.7.0
Mar 5, 2026
1.6.0
Mar 4, 2026
1.5.2
Mar 4, 2026
1.5.1
Mar 3, 2026
1.5.0
Mar 3, 2026
1.4.0
Mar 3, 2026
1.3.0
Mar 2, 2026
1.2.1
Mar 1, 2026
1.2.0
Feb 28, 2026
1.1.1
Feb 20, 2026
1.1.0
Feb 20, 2026
1.0.4
Feb 20, 2026
1.0.3
Feb 20, 2026
1.0.2
Feb 20, 2026
1.0.1
Feb 20, 2026
1.0.0
Feb 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

memory_store
annotations: none low

Store a new memory. Provide title, description, type, tags, and content.

title string content string
memory_list
annotations: none low

List memories with optional filtering by type or category.

limit number category string
memory_delete
annotations: none low

Delete a memory by ID.

id string
memory_search
annotations: none low

Search memories by query. Returns ranked results matching title, description, tags, or content.

limit number query string
memory_retrieve
annotations: none low

Retrieve a specific memory by ID (format: category/slug).

id string
memory_update
annotations: none low

Update an existing memory. Provide the ID and fields to update. Content is appended.

id string title string content string description string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), path
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 87

low
Tool 'memory_store' has no annotations annotation_checker · 100%
low
Tool 'memory_list' has no annotations annotation_checker · 100%
low
Tool 'memory_delete' has no annotations annotation_checker · 100%
low
Tool 'memory_search' has no annotations annotation_checker · 100%
low
Tool 'memory_retrieve' has no annotations annotation_checker · 100%
low
Tool 'memory_update' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: next@16.1.6 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h27x-g6w4-24gq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-jcc7-9wpm-mj36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mq59-m269-xvcx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.19.11 (GHSA-92pp-h63x-v22m) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.19.11 (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-xf4j-xp2r-rqqx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.7 (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: memory_store manifest_parser · 70%
info
Tool: memory_list manifest_parser · 70%
info
Tool: memory_delete manifest_parser · 70%
info
Tool: memory_search manifest_parser · 70%
info
Tool: memory_retrieve manifest_parser · 70%
info
Tool: memory_update manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (16) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 896 components sbom_generator · 100%
high
Hardcoded Password found in dinhanhthi-coding-friend-a69c081/website/src/content/docs/skills/cf-tdd.mdx secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%