{"name":"io.github.zrk222/code-factory","slug":"zrk222-code-factory","title":null,"description":"Local proof facts for AI coding clients: intent, tests, Graph Ops, and review evidence.","url":"https://mcp.market/server/zrk222-code-factory","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":35,"stars":6,"forks":0,"downloads_week":191,"last_push_at":"2026-09-19T09:55:43.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/zrk222/code-factory","website":null,"version":"0.46.7","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"factoryline-code-factory","version":"0.46.7","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"value":"factoryline-code-factory==0.46.7","type":"named","name":"--from"}],"packageArguments":[{"value":"factory","type":"positional"},{"value":"mcp","type":"positional"},{"value":"serve","type":"positional"}]}],"tools":[],"scan":{"score":77,"grade":"B","scanned_at":"2026-09-19T21:13:45.951Z","report":{"scannerVersion":"0.1.8","scannedAt":"2026-09-19T21:13:45.934Z","components":{"code":{"score":15,"max":25,"notes":["478 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"factoryline_code_factory-0.46.7/factoryline/review_audits.py: …mport subprocess\\nsubprocess.run(value, shell=True)\", {\"SECURITY_SHELL_COMMAND…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"factoryline_code_factory-0.46.7/factoryline/review_audits.py: …ures = ( (\"dynamic-execution\", \"eval(value)\", {\"SECURITY_DYNAMIC_EXECUTION\"})…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"factoryline-code-factory","version":"0.46.7","found":true,"license":"MIT OR Apache-2.0","dependencyCount":16,"publishedAt":"2026-09-19T10:31:17.263933Z","repositoryUrl":"https://github.com/zrk222/code-factory"}],"repo":{"found":true,"owner":"zrk222","repo":"code-factory","archived":false,"pushedAt":"2026-09-19T09:55:43Z","stars":6,"forks":0,"openIssues":5,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/199277449?v=4","ownerCreatedAt":"2025-02-14T17:16:50Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/199277449?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":6,"forks":0,"downloadsWeek":191,"license":"NOASSERTION","lastPushAt":"2026-09-19T09:55:43.000Z","score":35}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"B","reason":"score 77: subprocess with shell=True; eval / new Function used","createdAt":"2026-09-19T21:13:46.370Z"}],"reviews":[]}