Observer AI Agent
by Roy3838Local Micro-Agents that monitor your screen, so you don't have to.
Observer is an open-source ai agent by Roy3838, written mainly in TypeScript, with 1,664 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 30, 2026.
Scan summary: scanned Nov 13, 2026 at commit 405e4f5. Seen able to run shell commands, run dynamic code, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
405e4f5 · Nov 13, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit433 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (144)
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
docker/observer-ollama/observer_ollama/command_executor.py:22 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Turns off TLS certificate checking, allowing traffic interception.
docker/observer-ollama/test.py:16 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Turns off TLS certificate checking, allowing traffic interception.
docker/observer-ollama/test.py:17 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.openssl@0.10.71: 9 known vulnerabilitiesRUSTSEC-2025-0022, RUSTSEC-2026-0463, RUSTSEC-2026-0473, RUSTSEC-2026-0474, RUSTSEC-2026-0475 +4 more
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.28.2: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.30.0: 6 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194 +1 more
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.32.0: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.37.5: 4 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194, RUSTSEC-2026-0195
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.38.4: 8 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194 +3 more
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.9: 8 known vulnerabilitiesRUSTSEC-2026-0037, RUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340 +3 more
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.102.8: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar@0.4.44: 3 known vulnerabilitiesRUSTSEC-2026-0067, RUSTSEC-2026-0068, GHSA-3pv8-6f4r-ffg2
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tauri@2.9.5: 3 known vulnerabilitiesGHSA-7gmj-67g7-phm9, GHSA-7gmj-67g7-phm9, GHSA-7gmj-67g7-phm9
app/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.13: 8 known vulnerabilitiesRUSTSEC-2026-0037, RUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340 +3 more
app/mobile/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.103.8: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
app/mobile/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tauri@2.10.2: 1 known vulnerabilityGHSA-7gmj-67g7-phm9
app/plugins/screen-capture/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash-es@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.3: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 6 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 6 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +1 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.57.1: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.32.6: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 4 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 24 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +19 more
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.19.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.openssl@0.10.75: 8 known vulnerabilitiesRUSTSEC-2026-0463, RUSTSEC-2026-0473, RUSTSEC-2026-0474, RUSTSEC-2026-0475, RUSTSEC-2026-0476 +3 more
cli/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.103.9: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
cli/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.24.4: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 4 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.8: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.react-router@7.13.0: 12 known vulnerabilitiesGHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8646-j5j9-6r62 +7 more
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.34.8: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.14: 16 known vulnerabilitiesGHSA-356w-63v5-8wf4, GHSA-4r4m-qw57-chr8, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv +11 more
websites/landing/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
websites/partner_dashboard/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.12: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
websites/partner_dashboard/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
websites/partner_dashboard/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.27.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
websites/status/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.52.5: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
websites/status/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.96: 1 known vulnerabilityRUSTSEC-2026-0190
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bytes@1.10.0: 1 known vulnerabilityRUSTSEC-2026-0007
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crossbeam-channel@0.5.14: 1 known vulnerabilityRUSTSEC-2025-0024
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crossbeam-epoch@0.9.18: 2 known vulnerabilitiesRUSTSEC-2026-0204, RUSTSEC-2026-0204
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.event-listener@5.4.0: 1 known vulnerabilityRUSTSEC-2026-0221
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.fxhash@0.2.1: 4 known vulnerabilitiesRUSTSEC-2025-0057, RUSTSEC-2025-0057, RUSTSEC-2025-0057, RUSTSEC-2025-0057
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.glib@0.18.5: 4 known vulnerabilitiesRUSTSEC-2024-0429, RUSTSEC-2024-0429, RUSTSEC-2024-0429, RUSTSEC-2024-0429
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.8: 1 known vulnerabilityRUSTSEC-2026-0258
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.memmap2@0.7.1: 1 known vulnerabilityRUSTSEC-2026-0186
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.memmap2@0.9.8: 1 known vulnerabilityRUSTSEC-2026-0186
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.pin-utils@0.1.0: 5 known vulnerabilitiesRUSTSEC-2026-0441, RUSTSEC-2026-0441, RUSTSEC-2026-0441, RUSTSEC-2026-0441, RUSTSEC-2026-0441
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.proc-macro-error@1.0.4: 4 known vulnerabilitiesRUSTSEC-2024-0370, RUSTSEC-2024-0370, RUSTSEC-2024-0370, RUSTSEC-2024-0370
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.quinn-udp@0.5.10: 1 known vulnerabilityRUSTSEC-2026-0538
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.7.3: 4 known vulnerabilitiesRUSTSEC-2026-0097, RUSTSEC-2026-0097, RUSTSEC-2026-0097, RUSTSEC-2026-0097
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.8.5: 4 known vulnerabilitiesRUSTSEC-2026-0097, RUSTSEC-2026-0097, RUSTSEC-2026-0097, RUSTSEC-2026-0097
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.9.2: 3 known vulnerabilitiesRUSTSEC-2026-0097, RUSTSEC-2026-0097, RUSTSEC-2026-0097
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.ring@0.17.11: 1 known vulnerabilityRUSTSEC-2025-0009
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rkyv@0.7.45: 2 known vulnerabilitiesRUSTSEC-2026-0001, RUSTSEC-2026-0235
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustix@1.0.8: 1 known vulnerabilityRUSTSEC-2026-0486
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.23: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-pemfile@2.2.0: 1 known vulnerabilityRUSTSEC-2025-0134
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_with@3.12.0: 1 known vulnerabilityGHSA-7gcf-g7xr-8hxj
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.time@0.3.37: 1 known vulnerabilityRUSTSEC-2026-0009
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.43.0: 2 known vulnerabilitiesRUSTSEC-2025-0023, RUSTSEC-2026-0386
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-property@0.9.0: 4 known vulnerabilitiesRUSTSEC-2025-0081, RUSTSEC-2025-0081, RUSTSEC-2025-0081, RUSTSEC-2025-0081
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-range@0.9.0: 4 known vulnerabilitiesRUSTSEC-2025-0075, RUSTSEC-2025-0075, RUSTSEC-2025-0075, RUSTSEC-2025-0075
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-common@0.9.0: 4 known vulnerabilitiesRUSTSEC-2025-0080, RUSTSEC-2025-0080, RUSTSEC-2025-0080, RUSTSEC-2025-0080
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-ident@0.9.0: 4 known vulnerabilitiesRUSTSEC-2025-0100, RUSTSEC-2025-0100, RUSTSEC-2025-0100, RUSTSEC-2025-0100
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-version@0.9.0: 4 known vulnerabilitiesRUSTSEC-2025-0098, RUSTSEC-2025-0098, RUSTSEC-2025-0098, RUSTSEC-2025-0098
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.wasapi@0.22.0: 3 known vulnerabilitiesRUSTSEC-2026-0332, RUSTSEC-2026-0332, RUSTSEC-2026-0332
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@0.26.8: 1 known vulnerabilityRUSTSEC-2026-0381
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.xcb@1.5.0: 1 known vulnerabilityRUSTSEC-2025-0051
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zbus_names@4.2.0: 2 known vulnerabilitiesRUSTSEC-2026-0371, RUSTSEC-2026-0371
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@5.6.0: 1 known vulnerabilityRUSTSEC-2026-0370
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@5.6.0: 1 known vulnerabilityRUSTSEC-2026-0372
app/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.100: 2 known vulnerabilitiesRUSTSEC-2026-0190, RUSTSEC-2026-0190
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bytes@1.11.0: 3 known vulnerabilitiesRUSTSEC-2026-0007, RUSTSEC-2026-0007, RUSTSEC-2026-0007
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.event-listener@5.4.1: 2 known vulnerabilitiesRUSTSEC-2026-0221, RUSTSEC-2026-0221
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.memmap2@0.9.10: 2 known vulnerabilitiesRUSTSEC-2026-0186, RUSTSEC-2026-0186
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.quinn-udp@0.5.14: 1 known vulnerabilityRUSTSEC-2026-0538
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rkyv@0.7.46: 1 known vulnerabilityRUSTSEC-2026-0235
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustix@1.1.3: 3 known vulnerabilitiesRUSTSEC-2026-0486, RUSTSEC-2026-0486, RUSTSEC-2026-0486
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.35: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_with@3.16.1: 3 known vulnerabilitiesGHSA-7gcf-g7xr-8hxj, GHSA-7gcf-g7xr-8hxj, GHSA-7gcf-g7xr-8hxj
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.time@0.3.44: 2 known vulnerabilitiesRUSTSEC-2026-0009, RUSTSEC-2026-0009
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.48.0: 1 known vulnerabilityRUSTSEC-2026-0386
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@1.0.6: 1 known vulnerabilityRUSTSEC-2026-0381
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@5.8.0: 1 known vulnerabilityRUSTSEC-2026-0370
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@5.8.0: 1 known vulnerabilityRUSTSEC-2026-0372
app/mobile/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.49.0: 3 known vulnerabilitiesRUSTSEC-2026-0386, RUSTSEC-2026-0386, RUSTSEC-2026-0386
app/mobile/plugins/device-lock/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.101: 1 known vulnerabilityRUSTSEC-2026-0190
app/plugins/screen-capture/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zbus_names@4.3.1: 1 known vulnerabilityRUSTSEC-2026-0371
app/plugins/screen-capture/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@5.9.2: 1 known vulnerabilityRUSTSEC-2026-0370
app/plugins/screen-capture/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@5.9.2: 1 known vulnerabilityRUSTSEC-2026-0372
app/plugins/screen-capture/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.6: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@protobufjs/utf8@1.1.0: 1 known vulnerabilityGHSA-q6x5-8v7m-xcrf
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@remix-run/router@1.23.2: 1 known vulnerabilityGHSA-2j2x-hqr9-3h42
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.9.19: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 4 known vulnerabilitiesGHSA-67mh-4wv8-2f99, GHSA-67mh-4wv8-2f99, GHSA-67mh-4wv8-2f99, GHSA-67mh-4wv8-2f99
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.Matched a malicious-package advisory but is npm security placeholder (empty package): fs@0.0.1-securityMAL-2025-21003
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.28: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 8 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf +3 more
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.prismjs@1.27.0: 1 known vulnerabilityGHSA-x7hr-w5r2-h6wg
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.react-router@6.30.3: 3 known vulnerabilitiesGHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-wrjc-x8rr-h8h6
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.react-router-dom@6.30.3: 1 known vulnerabilityGHSA-jjmj-jmhj-qwj2
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
app/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.13: 1 known vulnerabilityRUSTSEC-2026-0258
cli/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.36: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
cli/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.26.9: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
websites/landing/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/helpers@7.26.9: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
websites/landing/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.7.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
websites/landing/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.33: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
websites/partner_dashboard/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.4: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
websites/status/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.8.19: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
websites/status/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Observer alternatives
View more →Similar ai agents in Deployment & DevOps, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Observer (this page) Roy3838 | 1.7k | AGPL-3.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Langflow langflow-ai | 156k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Novu novuhq | 40k | None found | Nov 1, 2026 | Not scanned yet |
| QwenPaw agentscope-ai | 37k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Kestra kestra-io | 30k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Chroma chroma-core | 30k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |