← Back to search

pangolint-mcp

GitHub Actions Scanned 19d ago

MCP server exposing PangoLint's curated PangoScript knowledge to AI coding agents.

npm
? Not scanned yet

Versions

0.9.7latest
Jul 23, 2026
0.9.1
Jun 22, 2026
0.9.0
Jun 22, 2026
0.8.2
Jun 17, 2026
0.8.1
Jun 5, 2026
+ show 16 moreshow less
0.8.0
Jun 2, 2026
0.7.64
Jun 1, 2026
0.7.63
May 30, 2026
0.7.60
May 26, 2026
0.7.39
May 25, 2026
0.7.38
May 23, 2026
0.7.37
May 23, 2026
0.7.36
May 23, 2026
0.7.32
May 23, 2026
0.7.30
May 22, 2026
0.7.29
May 22, 2026
0.7.28
May 22, 2026
0.7.27
May 22, 2026
0.7.20
May 22, 2026
0.7.6
May 21, 2026
0.7.5
May 21, 2026

Tools 0

No tools indexed yet.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 14

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
High-entropy string (5.95 bits/char) in JD3Lasers-PangoLint-b00b5d4/src/sidebar/view/webview/objectsWebview.ts:153 entropy_analyzer · 54%
medium
High-entropy string (5.95 bits/char) in JD3Lasers-PangoLint-b00b5d4/src/sidebar/view/webview/commandsWebview.ts:279 entropy_analyzer · 54%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 677 components sbom_generator · 100%
high
Hardcoded Password found in JD3Lasers-PangoLint-b00b5d4/mcp/src/configEnv.ts secret_scanner · 65%
high
Hardcoded Password found in JD3Lasers-PangoLint-b00b5d4/src/extensionHost/extensionIds.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%