registry  /  @classic-homes/theme-mcp  /  0.1.38

@classic-homes/theme-mcp@0.1.38

MCP server for Classic Theme design system - enables AI assistants to understand and correctly use components, tokens, and patterns

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Network
Supply chain
HighEntropyStringsUrlStrings
Manifest
WildcardDependency
scanned 2 file(s), 1.87 MB of source, external domains: api.example.com, api.test, avatars.githubusercontent.com, docs.example.com, example.com, github.com, sso.example.com, status.example.com, theme.classichomes.com

Source & flagged code

12 flagged · loading source
dist/index.jsView file
5344patternName = generic_password severity = medium line = 5344 matchedText = if (!pas...ed';
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L5344
5345patternName = generic_password severity = medium line = 5345 matchedText = else if ...rs';
Medium
Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L5345
15959patternName = generic_password severity = medium line = 15959 matchedText = example:...\n}"
Medium
Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L15959
16150patternName = generic_password severity = medium line = 16150 matchedText = example:...});"
Medium
Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L16150
18181patternName = generic_password severity = medium line = 18181 matchedText = example:...});"
Medium
Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L18181
18665patternName = generic_password severity = medium line = 18665 matchedText = code: "i...n}",
Medium
Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L18665
dist/cli.jsView file
5349patternName = generic_password severity = medium line = 5349 matchedText = if (!pas...ed';
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L5349
5350patternName = generic_password severity = medium line = 5350 matchedText = else if ...rs';
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L5350
15964patternName = generic_password severity = medium line = 15964 matchedText = example:...\n}"
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L15964
16155patternName = generic_password severity = medium line = 16155 matchedText = example:...});"
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L16155
18186patternName = generic_password severity = medium line = 18186 matchedText = example:...});"
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L18186
18670patternName = generic_password severity = medium line = 18670 matchedText = code: "i...n}",
Medium
Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L18670

Findings

14 Medium4 Low
MediumSecret Patterndist/index.js
MediumNetwork
MediumWildcard Dependency
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/cli.js
MediumSecret Patterndist/cli.js
MediumSecret Patterndist/cli.js
MediumSecret Patterndist/cli.js
MediumSecret Patterndist/cli.js
MediumSecret Patterndist/cli.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings