github JavaScript re-analysis due

new-256/codebuddy-bridge

github

codebuddy-first bridge for DeepSeek Harness (DSH): dispatch real work to the local codebuddy CLI first in every mode, with fallback dialog, live status light, token usage accounting, and a zero-dependency MCP server

maintainer
new-256
licence
MIT
first seen
2026-09-01
last seen
2026-09-18
releases · 30d
13
short id

new-256/codebuddy-bridge is an MCP server distributed on github, maintained by new-256, tracked here since September 2026. It has shipped 13 releases and exposes 3 tools. Tools include codebuddy_continue, codebuddy_run, codebuddy_status. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 3 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 3
  • codebuddy_continue
  • codebuddy_run
  • codebuddy_status
release cadence · 90d 13 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
v1.1.11 2026-09-17 github
v1.1.10 2026-09-12 github
v1.1.9 2026-09-10 github
v1.1.8 2026-09-10 github
v1.1.7 2026-09-09 github
v1.1.6 2026-09-08 github
v1.1.5 2026-09-04 github
v1.1.4 2026-09-04 github
v1.1.3 2026-09-02 github
v1.1.2 2026-09-02 github

view all →