Agent Squad
by 2FastLabsFlexible and powerful framework for managing multiple AI agents and handling complex conversations
Agent Squad is an open-source ai agent by 2FastLabs, written mainly in Python, with 7,795 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 8, 2026.
Scan summary: scanned Nov 5, 2026 at commit 729d5f5. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
729d5f5 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Passed. This check ran and found nothing it flags.Static code scanpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit915 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (134)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 40 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +35 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.8.1: 8 known vulnerabilitiesGHSA-4q55-j62x-fr9h, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32 +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 24 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +19 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.4: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.15: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.16: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.33.4: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.smol-toml@1.7.0: 2 known vulnerabilitiesGHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 4 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@4.0.1: 3 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.6: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.12.4: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
examples/chat-chainlit-app/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.13.5: 136 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +131 more
examples/chat-demo-app/lambda/auth/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 5 known vulnerabilitiesGHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx
examples/chat-demo-app/lambda/auth/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aws-cdk-lib@2.194.0: 3 known vulnerabilitiesGHSA-464c-974j-9xm6, GHSA-999r-qq7v-r334, GHSA-vcrf-j523-4mrf
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 16 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.23.2: 4 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@7.0.3: 3 known vulnerabilitiesGHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 24 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.1: 6 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f +1 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.2: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@9.0.5: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 15 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +10 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 10 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc +5 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 12 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +7 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 9 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +4 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 20 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +15 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pacote@18.0.6: 1 known vulnerabilityGHSA-w4pp-8pjf-rmxw
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 8 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +3 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sigstore@2.3.1: 1 known vulnerabilityGHSA-52v5-jr5w-gjxr
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.underscore@1.13.6: 2 known vulnerabilitiesGHSA-qpx9-hpmf-5gmw, GHSA-qpx9-hpmf-5gmw
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 6 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq +1 more
examples/chat-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.24.0: 6 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g +1 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.1.1: 13 known vulnerabilitiesGHSA-33hq-fvwr-56pm, GHSA-4q55-j62x-fr9h, GHSA-8qm3-746x-r74r, GHSA-9rgm-9g3h-6x36, GHSA-cfw5-2vxh-hr84 +8 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.2: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-cookie@3.0.5: 2 known vulnerabilitiesGHSA-qjx8-664m-686j, GHSA-qjx8-664m-686j
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.2: 8 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +3 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.8: 9 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +4 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.47: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.23.0: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.33.5: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.20: 9 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-93m4-6634-74q7, GHSA-9jrq-w75r-8gcw +4 more
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.24.1: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
examples/chat-demo-app/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aws-cdk-lib@2.195.0: 3 known vulnerabilitiesGHSA-464c-974j-9xm6, GHSA-999r-qq7v-r334, GHSA-vcrf-j523-4mrf
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.defu@6.1.4: 1 known vulnerabilityGHSA-737v-mqg7-c878
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.7.1: 8 known vulnerabilitiesGHSA-4q55-j62x-fr9h, GHSA-77vg-94rm-hx3p, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm +3 more
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 4 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.h3@1.15.4: 5 known vulnerabilitiesGHSA-22cc-p3c6-wpvm, GHSA-4hxc-9384-m385, GHSA-72gr-qfp7-vwhw, GHSA-mp2g-9vg9-f4cg, GHSA-wr4h-v87w-p3r7
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.40.2: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.semver@7.3.8: 1 known vulnerabilityGHSA-c2qf-rxjj-qqgw
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.smol-toml@1.5.2: 3 known vulnerabilitiesGHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2, GHSA-v3rj-xjv7-4jmq
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.underscore@1.13.7: 2 known vulnerabilitiesGHSA-qpx9-hpmf-5gmw, GHSA-qpx9-hpmf-5gmw
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.4.1: 9 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +4 more
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
examples/ecommerce-support-simulator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.6.2: 11 known vulnerabilitiesGHSA-33hq-fvwr-56pm, GHSA-4q55-j62x-fr9h, GHSA-8qm3-746x-r74r, GHSA-9rgm-9g3h-6x36, GHSA-cfw5-2vxh-hr84 +6 more
examples/ecommerce-support-simulator/resources/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.1: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
examples/ecommerce-support-simulator/resources/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.22.4: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
examples/ecommerce-support-simulator/resources/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 8 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
examples/ecommerce-support-simulator/resources/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.40.0: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
examples/fast-api-streaming/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.15.0: 36 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +31 more
examples/local-demo/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
examples/local-demo/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
examples/local-demo/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 16 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +11 more
examples/mcp-shop-server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strands-agents@1.5.0: 3 known vulnerabilitiesGHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m, GHSA-763v-5pjm-fx36
python/test_requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.14: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.0: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mongoose@8.9.5: 2 known vulnerabilitiesGHSA-664h-wqgq-64gw, GHSA-wpg9-53fq-2r8h
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.7: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mdast-util-to-hast@13.1.0: 1 known vulnerabilityGHSA-4fh9-h7wg-q85m
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 3 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215
examples/chat-chainlit-app/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.11: 4 known vulnerabilitiesGHSA-r4q5-vmmm-2653, GHSA-r4q5-vmmm-2653, GHSA-r4q5-vmmm-2653, GHSA-r4q5-vmmm-2653
examples/chat-demo-app/lambda/auth/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.24.9: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/helpers@7.24.8: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@sigstore/core@1.1.0: 1 known vulnerabilityGHSA-jfc7-64v2-mr8c
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@3.0.9: 4 known vulnerabilitiesGHSA-6475-r3vj-m8vf, GHSA-6475-r3vj-m8vf, GHSA-6475-r3vj-m8vf, GHSA-6475-r3vj-m8vf
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 4 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 4 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.aws-sdk@2.1659.0: 1 known vulnerabilityGHSA-j965-2qgj-vjmq
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 3 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.diff@4.0.2: 3 known vulnerabilitiesGHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.diff@5.2.0: 4 known vulnerabilitiesGHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.24.0: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.micromatch@4.0.7: 1 known vulnerabilityGHSA-952p-6rrq-rcjv
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.0: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.12.3: 10 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883 +5 more
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@1.10.2: 2 known vulnerabilitiesGHSA-48c2-rrv3-qjmp, GHSA-48c2-rrv3-qjmp
examples/chat-demo-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.26.0: 2 known vulnerabilitiesGHSA-4x5r-pxfx-6jf8, GHSA-4x5r-pxfx-6jf8
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 2 known vulnerabilitiesGHSA-67mh-4wv8-2f99, GHSA-67mh-4wv8-2f99
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mdast-util-to-hast@13.2.0: 3 known vulnerabilitiesGHSA-4fh9-h7wg-q85m, GHSA-4fh9-h7wg-q85m, GHSA-4fh9-h7wg-q85m
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 6 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf +1 more
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.prismjs@1.27.0: 1 known vulnerabilityGHSA-x7hr-w5r2-h6wg
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.prismjs@1.29.0: 2 known vulnerabilitiesGHSA-x7hr-w5r2-h6wg, GHSA-x7hr-w5r2-h6wg
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.2.2: 2 known vulnerabilitiesGHSA-48c2-rrv3-qjmp, GHSA-48c2-rrv3-qjmp
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.5.1: 3 known vulnerabilitiesGHSA-48c2-rrv3-qjmp, GHSA-48c2-rrv3-qjmp, GHSA-48c2-rrv3-qjmp
examples/chat-demo-app/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.25.8: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
examples/ecommerce-support-simulator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/helpers@7.25.7: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
examples/ecommerce-support-simulator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@eslint/plugin-kit@0.2.3: 1 known vulnerabilityGHSA-xffm-g5w8-qvg7
examples/ecommerce-support-simulator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.24.2: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
examples/ecommerce-support-simulator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.13.0: 5 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
examples/ecommerce-support-simulator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@astrojs/rss@4.0.7: 1 known vulnerabilityGHSA-8j5q-mfj2-5q9q
examples/ecommerce-support-simulator/resources/ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@3.0.5: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
examples/local-demo/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.24.8: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.7: 1 known vulnerabilityGHSA-p498-v437-472g
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@3.0.12: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@4.2.1: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.12.2: 5 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
typescript/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Agent Squad alternatives
View more →Similar ai agents in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Agent Squad (this page) 2FastLabs | 7.8k | Apache-2.0 | Oct 8, 2026 | Scanned, no flagged issues |
| Deepseek Harness deepseek-ai | 268k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| Ponytail DietrichGebert | 182k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Orca stablyai | 112k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Deer Flow bytedance | 85k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Ruflo ruvnet | 80k | MIT | Nov 1, 2026 | Scanned, no flagged issues |