GhostFree
io.github.shane-js/ghostfree · Status: active
If you find your own account name here: write informally to German.saas@web.de, stating the identifier concerned. No reason has to be given. How to object
- Registry name
io.github.shane-js/ghostfree- Package coordinate
npm:ghostfree- Version
0.2.0- Listed in the registry
- 2026-04-07
- Changed in the registry
- 2026-04-07
- First seen by tracevero
- 2026-08-06
- Vendor's website
- https://github.com/shane-js/ghostfree#readme
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
Vendor's own description, untranslated and unverified
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin. What the confidence levels mean
Measured values
| Credentials required | no Raw declaration – Required secret variables (raw): confirmed absent Raw declaration – Required secret headers (raw): confirmed absent Source: MCP-Register · collected on 2026-08-06 · derived |
|---|---|
| Execution location | local Raw declaration – Transports (raw): stdio Source: MCP-Register · collected on 2026-08-06 · derived |
| Path argument present | yes Raw declaration – Path arguments (raw): --repo-path Raw declaration – Path environment variables (raw): GHOSTFREE_DIR Source: MCP-Register · collected on 2026-08-06 · derived |
| Repository URL listed | yes Raw declaration – Repository (raw): https://github.com/shane-js/ghostfree Source: MCP-Register · collected on 2026-08-06 · derived |
| Version | 0.2.0 Source: MCP-Register · collected on 2026-08-06 · self-declared |
Position within the holdings
How many of the 24,717 published entries carry the same measured value. A reference figure, not an assessment.
- Credentials requiredno20,455 of 24,717 carry this value (83 %)View these entries
- Execution locationlocal12,180 of 24,717 carry this value (49 %)View these entries
- Path argument presentyes237 of 24,717 carry this value (1.0 %)View these entries
- Repository URL listedyes19,247 of 24,717 carry this value (78 %)View these entries
All 4 values together are carried by 194 of 24,717 entries.
This entry appears in these selections
- MCP servers without credentials20,455
- Locally executed MCP servers12,180
- MCP servers with a repository URL19,247
- MCP servers with a path argument237
- Local MCP servers without credentials9,277
- Local MCP servers with a repository URL11,571
- MCP servers over stdio only9,904
- MCP servers as an npm package only7,203
- Local MCP servers as an npm package only7,115
- npm packages with a repository URL6,852
- MCP servers over stdio, as an npm package only6,238
- MCP servers available as a package only10,706
- MCP servers with npx as their only runtime hint1,089
The source's raw values23
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.
| Environment variables (raw) | GHOSTFREE_DIR, GHOSTFREE_MIN_SEVERITY, NVD_API_KEY Source: MCP-Register · collected on 2026-08-06 · self-declared |
|---|---|
| Required secret variables (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-06 · self-declared |
| Transports (raw) | stdio Source: MCP-Register · collected on 2026-08-06 · self-declared |
| Path arguments (raw) | --repo-path Source: MCP-Register · collected on 2026-08-06 · self-declared |
| Repository (raw) | https://github.com/shane-js/ghostfree Source: MCP-Register · collected on 2026-08-06 · self-declared |
| Package registries (raw) | npm Source: MCP-Register · collected on 2026-08-06 · self-declared |
| Required secret headers (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Path environment variables (raw) | GHOSTFREE_DIR Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Remote URLs (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Remote hosts (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Registry status message (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| First listed in the registry (raw) | 2026-04-07 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Last changed in the registry (raw) | 2026-04-07 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Delivery form (raw) | paket Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Repository platform (raw) | github Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Repository subfolder (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Package identifiers (raw) | ghostfree Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Package versions (raw) | 0.2.0 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Runtime hints (raw) | npx Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Environment variable formats (raw) | filepath, string Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Environment variable descriptions (raw) | GHOSTFREE_DIR=Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root. · GHOSTFREE_MIN_SEVERITY=Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW. · NVD_API_KEY=Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key. Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Icon formats (raw) | image/png Source: MCP-Register · collected on 2026-08-16 · self-declared |
Changes
| 2026-08-16 | Last changed in the registry (raw): – → 2026-04-07 |
|---|---|
| 2026-08-16 | First listed in the registry (raw): – → 2026-04-07 |
| 2026-08-16 | Registry status message (raw): – → – |
| 2026-08-16 | Schema version of the raw record (raw): – → https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json |
| 2026-08-16 | Icon formats (raw): – → image/png |
| 2026-08-16 | Environment variable descriptions (raw): – → GHOSTFREE_DIR=Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root. · GHOSTFREE_MIN_SEVERITY=Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW. · NVD_API_KEY=Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key. |
| 2026-08-16 | Environment variable formats (raw): – → filepath, string |
| 2026-08-16 | Delivery form (raw): – → paket |
| 2026-08-16 | Remote hosts (raw): – → – |
| 2026-08-16 | Remote URLs (raw): – → – |
These are the 10 most recent changes to this entry. Full history
tracevero · https://tracevero.com/mcp/io-github-shane-js-ghostfree