github JavaScript analyzed 1052ac1

campfirein/byterover-cli

v3.16.1
github

ByteRover's CLI

maintainer
campfirein
licence
Elastic-2.0
first seen
2026-06-01
last seen
2026-09-16
releases · 30d
0
short id

campfirein/byterover-cli is an MCP server distributed on github, maintained by campfirein, tracked here since June 2026. It has shipped 103 releases (currently 3.16.1) and exposes 2 tools. Tools include brv-curate, brv-query. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 2 tools appear to reach filesystem, shell / exec, network and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 2
  • brv-curate
  • brv-query
release cadence · 90d 0 releases

No releases yet.

recent releases last 10
version date src
v3.16.1 2026-05-27 github
3.16.1 2026-05-27 npm
v3.16.0 2026-05-25 github
3.16.0 2026-05-25 npm
v3.15.1 2026-05-22 github
3.15.1 2026-05-22 npm
v3.15.0 2026-05-20 github
3.15.0 2026-05-20 npm
v3.14.0 2026-05-18 github
3.14.0 2026-05-18 npm

view all →