Capability drift in OrangeproAI/orangepro-mcp

github OrangeproAI/orangepro-mcp C

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

maintainer: OrangeproAI
tools: 33
CVEs: 0
releases: 16

advisory #883238

HIGH OrangeproAI/orangepro-mcp 09-06 14:49

code analysis flagged committed secret in OrangeproAI/orangepro-mcp

current permission surface (inferred):

drift timeline for OrangeproAI/orangepro-mcp → security tab →

drift history for this server 6 recorded

HIGH 09-09 04:04 code analysis flagged committed secret in OrangeproAI/orangepro-mcp
HIGH 09-07 22:09 code analysis flagged committed secret in OrangeproAI/orangepro-mcp
HIGH 09-07 03:44 code analysis flagged committed secret in OrangeproAI/orangepro-mcp
HIGH 09-06 14:49 code analysis flagged committed secret in OrangeproAI/orangepro-mcp you are here
HIGH 08-14 16:03 code analysis flagged committed secret in OrangeproAI/orangepro-mcp
HIGH 07-30 19:42 code analysis flagged dynamic code execution ×2 in OrangeproAI/orangepro-mcp

This server has drifted again since this advisory — a dated claim is a snapshot, not a current state.