github Go analyzed 89c0225

ParadoxInfinite/oriel

github

A small, local GUI for Colima & Docker that's also an MCP server. Manage containers from a browser, or let your AI do it. Open-source Docker Desktop alternative; ~13 MB, macOS & Linux.

maintainer
ParadoxInfinite
licence
Apache-2.0
first seen
2026-06-22
last seen
2026-06-29
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vv0.10.0-rc.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 147

filesystem 1

  • fs (weak) ParadoxInfinite-oriel-89c0225/web/scripts/check-i18n.mjs :8 import { readFileSync, readdirSync } from 'node:fs'

network 5

  • net ParadoxInfinite-oriel-89c0225/web/dist/assets/index-B7mVkIy7.js :1 n(e){if(e.ep)return;e.ep=!0;let n=t(e);fetch(e.href,n)}})();var e=Array.isArray,t=Array.prototype.indexOf,n=Array.prototype.includes,r=Array.from,i=Object.defineProperty,a=Object.getOwnPropertyDescri
  • net ParadoxInfinite-oriel-89c0225/web/src/lib/api.js :39 const res = await fetch(url(path))
  • net ParadoxInfinite-oriel-89c0225/web/src/lib/locale.svelte.js :16 const r = await fetch(url)
  • net ParadoxInfinite-oriel-89c0225/web/src/lib/pull.svelte.js :77 // a wasted registry fetch (and mutate state on a detached controller).
  • net ParadoxInfinite-oriel-89c0225/web/src/lib/status.svelte.js :26 // refreshStatus does a one-off fetch (e.g. right after a start/stop); the live

declared dependencies 43

  • github.com/modelcontextprotocol/go-sdk@v1.6.1
  • @fontsource-variable/fraunces@^5.2.9
  • @fontsource-variable/geist@^5.2.9
  • @fontsource-variable/geist-mono@^5.2.8
  • @sveltejs/vite-plugin-svelte@^7
  • @tailwindcss/vite@^4
  • svelte@^5
  • tailwindcss@^4
  • vite@^8
  • github.com/docker/docker@v28.5.2+incompatible
  • gopkg.in/yaml.v3@v3.0.1
  • github.com/Microsoft/go-winio@v0.6.2
show 28 more
  • github.com/cespare/xxhash/v2@v2.3.0
  • github.com/containerd/errdefs@v1.0.0
  • github.com/containerd/errdefs/pkg@v0.3.0
  • github.com/containerd/log@v0.1.0
  • github.com/distribution/reference@v0.6.0
  • github.com/docker/go-connections@v0.7.0
  • github.com/docker/go-units@v0.5.0
  • github.com/felixge/httpsnoop@v1.0.4
  • github.com/go-logr/logr@v1.4.3
  • github.com/go-logr/stdr@v1.2.2
  • github.com/google/jsonschema-go@v0.4.3
  • github.com/moby/docker-image-spec@v1.3.1
  • github.com/moby/sys/atomicwriter@v0.1.0
  • github.com/moby/term@v0.5.2
  • github.com/morikuni/aec@v1.1.0
  • github.com/opencontainers/go-digest@v1.0.0
  • github.com/opencontainers/image-spec@v1.1.1
  • github.com/pkg/errors@v0.9.1
  • github.com/segmentio/asm@v1.1.3
  • github.com/segmentio/encoding@v0.5.4
  • github.com/yosida95/uritemplate/v3@v3.0.2
  • go.opentelemetry.io/auto/sdk@v1.2.1
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0
  • go.opentelemetry.io/otel@v1.44.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0
  • go.opentelemetry.io/otel/metric@v1.44.0
  • go.opentelemetry.io/otel/trace@v1.44.0
  • golang.org/x/oauth2@v0.35.0

3 more not shown — this panel samples each group; the count above is the real total.

obfuscation 1

  • dynamic require()/import() ParadoxInfinite-oriel-89c0225/web/src/editions/registry.svelte.js :34 const mod = await import(/* @vite-ignore */ `${BASE}/api/themes/${t.file}`)