SuperCoder AI Agent
by TransformerOptimusOpen Source Autonomous Software Development System
SuperCoder is an open-source ai agent by TransformerOptimus, written mainly in Rust, with 1,002 GitHub stars and the MIT license. Its code was last updated Jul 7, 2026.
Scan summary: scanned Nov 5, 2026 at commit 54cf972. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
54cf972 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Passed. This check ran and found nothing it flags.Static code scanpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit550 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (117)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.libyml@0.0.5: 1 known vulnerabilityRUSTSEC-2025-0067
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.37.5: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.39.4: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.14: 5 known vulnerabilitiesRUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0342
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.12: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.react-router@7.16.0: 5 known vulnerabilitiesGHSA-337j-9hxr-rhxg, GHSA-chx6-hx7r-mcp5, GHSA-h8fp-f39c-q6mh, GHSA-qwww-vcr4-c8h2, GHSA-wrjc-x8rr-h8h6
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 8 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
apps/desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google.golang.org/grpc@1.81.1: 4 known vulnerabilitiesGO-2026-6061, GO-2026-6348, GO-2026-6441, GO-2026-6443
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/dgrijalva/jwt-go@3.2.0+incompatible: 1 known vulnerabilityGO-2020-0017
v1/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-git/go-billy/v5@5.5.0: 4 known vulnerabilitiesGO-2026-5490, GO-2026-5597, GO-2026-5490, GO-2026-5597
v1/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/golang-jwt/jwt/v4@4.5.0: 2 known vulnerabilitiesGO-2024-3250, GO-2025-3553
v1/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.golang.org/x/oauth2@0.20.0: 1 known vulnerabilityGO-2025-3488
v1/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.7.2: 34 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +29 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 16 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 16 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@7.0.3: 2 known vulnerabilitiesGHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.1: 4 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.3.10: 4 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.2: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-cookie@3.0.5: 1 known vulnerabilityGHSA-qjx8-664m-686j
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.3: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.7: 8 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-mwcw-c2x4-8c55, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv +3 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.38: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.39: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.33.4: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@3.3.3: 3 known vulnerabilitiesGHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9, GHSA-cqmj-92xf-r6r9
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.4: 2 known vulnerabilitiesGHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.0: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@7.5.10: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.17.1: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
v1/gui/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel/sdk@1.27.0: 4 known vulnerabilitiesGO-2026-4394, GO-2026-5426, GO-2026-6505, GO-2026-6616
v1/workspace-service/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.golang.org/x/oauth2@0.18.0: 1 known vulnerabilityGO-2025-3488
v1/workspace-service/go.mod - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.102: 1 known vulnerabilityRUSTSEC-2026-0190
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crossbeam-epoch@0.9.18: 1 known vulnerabilityRUSTSEC-2026-0204
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.event-listener@5.4.1: 1 known vulnerabilityRUSTSEC-2026-0221
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.glib@0.18.5: 1 known vulnerabilityRUSTSEC-2024-0429
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.14: 1 known vulnerabilityRUSTSEC-2026-0258
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.proc-macro-error@1.0.4: 1 known vulnerabilityRUSTSEC-2024-0370
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.40: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-webpki@0.103.13: 1 known vulnerabilityRUSTSEC-2026-0382
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_with@3.20.0: 1 known vulnerabilityGHSA-7gcf-g7xr-8hxj
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_yml@0.0.12: 1 known vulnerabilityRUSTSEC-2025-0068
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.52.3: 1 known vulnerabilityRUSTSEC-2026-0386
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-property@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0081
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-char-range@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0075
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-common@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0080
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-ident@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0100
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unic-ucd-version@0.9.0: 1 known vulnerabilityRUSTSEC-2025-0098
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@1.0.7: 1 known vulnerabilityRUSTSEC-2026-0381
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zbus_names@4.3.2: 1 known vulnerabilityRUSTSEC-2026-0371
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@5.12.0: 1 known vulnerabilityRUSTSEC-2026-0370
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@5.12.0: 1 known vulnerabilityRUSTSEC-2026-0372
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@2.1.9: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.33: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.15.0: 5 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.prismjs@1.27.0: 2 known vulnerabilitiesGHSA-x7hr-w5r2-h6wg, GHSA-x7hr-w5r2-h6wg
apps/desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.filippo.io/edwards25519@1.1.0: 1 known vulnerabilityGO-2026-4503
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.7.3: 1 known vulnerabilityGO-2026-5764
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/aws/aws-sdk-go-v2/service/s3@1.92.0: 1 known vulnerabilityGO-2026-5764
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/quic-go/quic-go@0.59.0: 1 known vulnerabilityGO-2026-5676
go.mod - lowLow. Minor, or common in normal tools. Shown for information.go.opentelemetry.io/otel@1.43.0: 1 known vulnerabilityGO-2026-5158
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.54.0: 14 known vulnerabilitiesGO-2026-5025, GO-2026-5026, GO-2026-5027, GO-2026-5028, GO-2026-5029 +9 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.37.0: 2 known vulnerabilitiesGO-2026-5970, GO-2026-6629
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/aws/aws-sdk-go@1.54.17: 2 known vulnerabilitiesGO-2022-0635, GO-2022-0646
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/cloudflare/circl@1.3.7: 4 known vulnerabilitiesGO-2025-3754, GO-2026-4550, GO-2025-3754, GO-2026-4550
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/go-viper/mapstructure/v2@2.0.0-alpha.1: 4 known vulnerabilitiesGO-2025-3787, GO-2025-3900, GO-2025-3787, GO-2025-3900
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/redis/go-redis/v9@9.0.3: 1 known vulnerabilityGO-2025-3540
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.12.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.25.0: 40 known vulnerabilitiesGO-2024-3333, GO-2025-3503, GO-2025-3595, GO-2026-4440, GO-2026-4441 +35 more
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/sys@0.20.0: 2 known vulnerabilitiesGO-2026-5024, GO-2026-5024
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.15.0: 4 known vulnerabilitiesGO-2026-5970, GO-2026-6629, GO-2026-5970, GO-2026-6629
v1/go.mod - lowLow. Minor, or common in normal tools. Shown for information.@babel/runtime@7.24.7: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 2 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.16.0: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.colord@2.9.3: 1 known vulnerabilityGHSA-2wm5-q62r-hmrv
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.cookie@0.6.0: 1 known vulnerabilityGHSA-pxg6-pf52-xh8x
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.diff@5.1.0: 1 known vulnerabilityGHSA-73rr-hh4g-fpgx
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.6: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.lodash.omit@4.5.0: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-xxjr-mmjv-4gpg
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.micromatch@4.0.5: 1 known vulnerabilityGHSA-952p-6rrq-rcjv
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.micromatch@4.0.7: 2 known vulnerabilitiesGHSA-952p-6rrq-rcjv, GHSA-952p-6rrq-rcjv
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.parseuri@0.0.6: 1 known vulnerabilityGHSA-6fx8-h7jm-663j
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.0: 4 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.prismjs@1.29.0: 1 known vulnerabilityGHSA-x7hr-w5r2-h6wg
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@1.10.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.3.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.4.5: 2 known vulnerabilitiesGHSA-48c2-rrv3-qjmp, GHSA-48c2-rrv3-qjmp
v1/gui/yarn.lock - lowLow. Minor, or common in normal tools. Shown for information.go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.27.0: 2 known vulnerabilitiesGO-2026-4985, GO-2026-6505
v1/workspace-service/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.15.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
v1/workspace-service/go.mod - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
SuperCoder alternatives
View more →Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| SuperCoder (this page) TransformerOptimus | 1k | MIT | Jul 7, 2026 | Scanned, no flagged issues |
| AutoGPT Significant-Gravitas | 188k | None found | Nov 1, 2026 | Not scanned yet |
| Langchain langchain-ai | 149k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Gemini CLI google-gemini | 109k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MetaGPT FoundationAgents | 71k | MIT | Jan 21, 2026 | Scanned, no flagged issues |
| Oh My Openagent code-yeongyu | 71k | None found | Nov 1, 2026 | Not scanned yet |