Genkit AI Agent
by genkit-aiOpen-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google
Genkit is an open-source ai agent by genkit-ai, written mainly in TypeScript, with 6,562 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 63fba09. Seen able to run shell commands, run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
63fba09 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit1026 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
genkit-tools/cli/src/commands/dev-test-model.ts:69 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
genkit-tools/common/src/plugin/plugins.ts:80 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/copyright.ts:57 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/copyright.ts:59 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.8: 1 known vulnerabilityGHSA-27r3-jxmh-p828
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 4 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 24 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.1: 1 known vulnerabilityGHSA-mrwp-f3q8-3g9p
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.hono@4.12.7: 64 known vulnerabilitiesGHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +59 more
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.1.0: 12 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +7 more
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@8.3.0: 4 known vulnerabilitiesGHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.67: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
genkit-tools/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-jose/go-jose/v4@4.1.4: 3 known vulnerabilitiesGHSA-4w3g-jfj2-cw2q, GHSA-mgcc-cww5-fp2q, GHSA-vvm8-gf78-28g4
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/weaviate/weaviate@1.30.0: 3 known vulnerabilitiesGO-2025-4237, GO-2025-4238, GO-2026-6140
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel@1.36.0: 3 known vulnerabilitiesGO-2026-5506, GO-2026-5506, GO-2026-5506
go/samples/mcp-git-pr-explainer/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel/sdk@1.36.0: 9 known vulnerabilitiesGO-2026-4394, GO-2026-5426, GO-2026-6505, GO-2026-4394, GO-2026-5426 +4 more
go/samples/mcp-git-pr-explainer/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-jose/go-jose/v4@4.1.0: 8 known vulnerabilitiesGO-2026-4945, GHSA-4w3g-jfj2-cw2q, GHSA-mgcc-cww5-fp2q, GHSA-vvm8-gf78-28g4, GO-2026-4945 +3 more
go/samples/telemetry-test/kitchen_sink/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@3.2.0: 3 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-xjh9-v7x6-24jw
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.14.3: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.9.15: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@langchain/core@0.1.63: 1 known vulnerabilityGHSA-r399-636x-v7f6
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@langchain/core@0.2.36: 1 known vulnerabilityGHSA-r399-636x-v7f6
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.31.0: 4 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-rvq5-wwqv-78pq
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/propagator-jaeger@1.25.1: 1 known vulnerabilityGHSA-45rx-2jwx-cxfr
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.basic-ftp@5.2.0: 5 known vulnerabilitiesGHSA-6v7q-wjvx-w8wg, GHSA-c475-qrg2-pj4r, GHSA-chqc-8p9q-pq6q, GHSA-rp42-5vxx-qpwr, GHSA-rpmf-866q-6p89
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.4: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.4: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg +3 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.engine.io@6.6.8: 1 known vulnerabilityGHSA-2gc4-cqfq-p2gv
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-xml-builder@1.1.2: 1 known vulnerabilityGHSA-5wm8-gmm8-39j9
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-xml-parser@5.5.3: 3 known vulnerabilitiesGHSA-8gc5-j5rx-235r, GHSA-gh4j-gqv2-49f6, GHSA-jp2q-39xq-3w4g
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fastify@5.8.5: 7 known vulnerabilitiesGHSA-3m5p-2c4r-xxw2, GHSA-4mh8-r7rc-xpvc, GHSA-667r-xxjv-c9mm, GHSA-9q9j-q6p8-xq58, GHSA-hwr6-493r-vm6h +2 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.find-my-way@9.6.0: 1 known vulnerabilityGHSA-c96f-x56v-gq3h
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@2.5.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.immutable@5.1.5: 2 known vulnerabilitiesGHSA-v56q-mh7h-f735, GHSA-xvcm-6775-5m9r
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.2: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain@0.1.37: 2 known vulnerabilitiesGHSA-hc5w-c9f8-9cc4, GHSA-r399-636x-v7f6
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.1.68: 3 known vulnerabilitiesGHSA-3644-q5cj-c5c7, GHSA-fw9q-39r9-c252, GHSA-rr7j-v2q5-chgv
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 2 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.1.1: 5 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.3.0: 4 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 9 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +4 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@5.1.11: 1 known vulnerabilityGHSA-28wg-ghj8-5hjv
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.3.3: 15 known vulnerabilitiesGHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p +10 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.4.0: 12 known vulnerabilitiesGHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +7 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.12: 1 known vulnerabilityGHSA-37ch-88jc-xwx2
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.6: 1 known vulnerabilityGHSA-2m8v-j782-fhvr
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.2.5: 1 known vulnerabilityGHSA-ph9p-34f9-6g65
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.1: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.30.0: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.6: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@7.5.10: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.19.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.1: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@isaacs/brace-expansion@5.0.0: 1 known vulnerabilityGHSA-7h2j-956f-4vf2
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@11.0.3: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@10.0.3: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.38: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.0.33: 2 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.3.1: 1 known vulnerabilityGHSA-cg8m-r9f2-5wm2
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.datamodel-code-generator@0.53.0: 11 known vulnerabilitiesPYSEC-2026-3555, PYSEC-2026-3557, PYSEC-2026-3558, PYSEC-2026-3559, PYSEC-2026-3560 +6 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.django@5.2.14: 10 known vulnerabilitiesPYSEC-2026-197, PYSEC-2026-198, PYSEC-2026-199, PYSEC-2026-200, PYSEC-2026-201 +5 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.django@6.0.5: 10 known vulnerabilitiesPYSEC-2026-197, PYSEC-2026-198, PYSEC-2026-199, PYSEC-2026-200, PYSEC-2026-201 +5 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.8.0: 1 known vulnerabilityGHSA-45c3-73f7-pv4m
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.24.0: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litestar@2.21.0: 2 known vulnerabilitiesPYSEC-2026-2603, PYSEC-2026-2604
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.26.0: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mistune@3.2.1: 11 known vulnerabilitiesPYSEC-2026-2210, PYSEC-2026-2211, PYSEC-2026-2212, PYSEC-2026-2213, PYSEC-2026-2214 +6 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.msgpack@1.1.2: 2 known vulnerabilitiesPYSEC-2026-3625, GHSA-j586-36cw-2gc2
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nbconvert@7.17.0: 3 known vulnerabilitiesPYSEC-2026-2229, PYSEC-2026-2230, GHSA-pjvx-prjx-h659
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pip@26.0.1: 4 known vulnerabilitiesPYSEC-2026-196, PYSEC-2026-2875, PYSEC-2026-2876, PYSEC-2026-3721
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@23.0.0: 1 known vulnerabilityPYSEC-2026-113
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.2: 8 known vulnerabilitiesPYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5 +3 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pypdf@6.8.0: 52 known vulnerabilitiesPYSEC-2026-3004, PYSEC-2026-3006, PYSEC-2026-3007, PYSEC-2026-3009, PYSEC-2026-3010 +47 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.22: 6 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +1 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8.3: 4 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 5 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.5.5: 13 known vulnerabilitiesPYSEC-2026-3387, PYSEC-2026-3388, PYSEC-2026-3389, PYSEC-2026-3928, GHSA-3hv7-mjh2-fv65 +8 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 5 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.36.1: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.extract-zip@2.0.1: 2 known vulnerabilitiesGHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@9.0.5: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@3.0.5: 3 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-pq67-2wwv-3xjx, GHSA-vj76-c3g6-qr5v
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.17.1: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.23.8: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
tests/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentai@1.44.0 build: `npm-run-all build:clean check compile` Exit status 1 ELIFECYCLE Command failed with exit code 1. ELIFECYCLE Command failed with exit code 1. ELIFECYCLE Command failed with exit code 1. ELIFECYCLE Command failed with exit code 1. ELIFECYCLE Command failed with exit code 1.
- lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
js/testapps/hono/README.md:45 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
py/packages/genkit-mcp/tests/mcp_config_test.py:26 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
py/packages/genkit-mcp/tests/mcp_host_test.py:859 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
py/samples/django-hello/README.md:12 - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.11: 6 known vulnerabilitiesGHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f, GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9 +1 more
genkit-tools/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@4.1.11: 4 known vulnerabilitiesGHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp, GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp
genkit-tools/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.glob@13.0.6: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
genkit-tools/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.6: 1 known vulnerabilityGHSA-g3hv-75wg-m249
genkit-tools/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
genkit-tools/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/crypto@0.55.0: 6 known vulnerabilitiesGO-2026-5932, GO-2026-6354, GO-2026-6355, GO-2026-5932, GO-2026-6354 +1 more
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.38.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.58.0: 14 known vulnerabilitiesGO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617 +9 more
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.52.0: 45 known vulnerabilitiesGO-2026-4918, GO-2026-5025, GO-2026-5026, GO-2026-5027, GO-2026-5028 +40 more
go/samples/mcp-git-pr-explainer/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/sys@0.42.0: 3 known vulnerabilitiesGO-2026-5024, GO-2026-5024, GO-2026-5024
go/samples/mcp-git-pr-explainer/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.36.0: 6 known vulnerabilitiesGO-2026-5970, GO-2026-6629, GO-2026-5970, GO-2026-6629, GO-2026-5970 +1 more
go/samples/mcp-git-pr-explainer/go.mod - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@4.0.27: 1 known vulnerabilityGHSA-866g-f22w-33x8
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@anthropic-ai/sdk@0.90.0: 1 known vulnerabilityGHSA-p7fg-763f-g4gf
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.29.0: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@langchain/community@0.0.53: 3 known vulnerabilitiesGHSA-6m59-8fmv-m5f9, GHSA-gf3v-fwqg-4vh7, GHSA-mphv-75cg-56wg
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@1.25.1: 1 known vulnerabilityGHSA-8988-4f7v-96qf
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@1.30.1: 1 known vulnerabilityGHSA-8988-4f7v-96qf
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-cassandra-driver@0.40.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-knex@0.39.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-mongoose@0.41.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-mysql@0.40.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-mysql2@0.40.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-pg@0.43.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/instrumentation-tedious@0.13.0: 1 known vulnerabilityGHSA-qqmp-wf37-98f9
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@protobufjs/utf8@1.1.0: 1 known vulnerabilityGHSA-q6x5-8v7m-xcrf
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@tootallnate/once@2.0.0: 1 known vulnerabilityGHSA-vpq2-c234-7xj6
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.7: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.csv-parse@5.6.0: 1 known vulnerabilityGHSA-8cw4-87c7-c6xx
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.4: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.15.0: 5 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.4: 1 known vulnerabilityGHSA-g3hv-75wg-m249
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.morgan@1.10.1: 3 known vulnerabilitiesGHSA-4vj7-5mj6-jm8m, GHSA-9f6g-j8ch-79g4, GHSA-jxfw-x594-9x9m
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.14.2: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.0: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.re2@1.23.3: 4 known vulnerabilitiesGHSA-6hxr-mr5r-9836, GHSA-8hcv-x26h-mcgp, GHSA-ff84-5f28-78qj, GHSA-j4r3-hg7j-8chg
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.stream-json@1.9.1: 3 known vulnerabilitiesGHSA-528h-pc64-c93x, GHSA-hqr4-qq8f-hg3x, GHSA-mjw6-4jj6-33hc
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.diff@4.0.2: 1 known vulnerabilityGHSA-73rr-hh4g-fpgx
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.bleach@6.3.0: 3 known vulnerabilitiesGHSA-8rfp-98v4-mmr6, GHSA-g75f-g53v-794x, GHSA-gj48-438w-jh9v
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.3.0: 1 known vulnerabilityPYSEC-2026-3628
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.hpack@4.1.0: 1 known vulnerabilityPYSEC-2026-4053
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.11: 1 known vulnerabilityPYSEC-2026-215
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.1: 1 known vulnerabilityPYSEC-2026-4244
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.44.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.12.0: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 1 known vulnerabilityPYSEC-2026-2987
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@9.0.2: 1 known vulnerabilityPYSEC-2026-1845
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.2.1: 1 known vulnerabilityPYSEC-2026-2270
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.5: 1 known vulnerabilityPYSEC-2026-2275
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@81.0.0: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.werkzeug@3.1.6: 1 known vulnerabilityPYSEC-2026-4312
py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.23.1: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
tests/pnpm-lock.yaml
Network activity
During install
github.comregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Genkit alternatives
View more →Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Genkit (this page) genkit-ai | 6.6k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| AutoGPT Significant-Gravitas | 188k | None found | Nov 1, 2026 | Not scanned yet |
| Langchain langchain-ai | 149k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Gemini CLI google-gemini | 109k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MetaGPT FoundationAgents | 71k | MIT | Jan 21, 2026 | Scanned, no flagged issues |
| Oh My Openagent code-yeongyu | 71k | None found | Nov 1, 2026 | Not scanned yet |