Capability drift in Aquaticat/Monochromatic

github Aquaticat/Monochromatic D

TypeScript and Rust monorepo: Claude Code and Pi coding-agent plugins, a minimal MCP stdio server framework, custom oxlint plugins and a pluggable Rust linter, policy-aware git tooling, core TS libraries, Wayland desktop apps (GTK4 file manager, Slint terminal, true-peak music player), OpenTofu infra automation, and a personal site.

maintainer: Aquaticat
tools: 0
CVEs: 0
releases: 22

advisory #815995

HIGH Aquaticat/Monochromatic 08-27 11:14

code analysis flagged committed secret ×3 in Aquaticat/Monochromatic

current permission surface (inferred):

drift timeline for Aquaticat/Monochromatic → security tab →

drift history for this server newest 8

HIGH 09-03 16:19 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 15:40 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 14:34 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 14:27 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 13:40 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 02:12 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 02:05 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic
HIGH 09-03 01:59 code analysis flagged committed secret ×3 in Aquaticat/Monochromatic

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.