github Python analyzed 61adba9

winterop-com/heim

github

heim — local, on-box LLM platform: build a model library, then run, chat, and serve it with MCP tools. Ships a DHIS2 assistant Chrome side panel. Source-available, proprietary.

maintainer
winterop-com
licence
NOASSERTION
first seen
2026-07-12
last seen
2026-08-26
releases · 30d
2
short id

winterop-com/heim is an MCP server distributed on github, maintained by winterop-com, tracked here since July 2026. It has shipped 3 releases and exposes 70 tools. Tools include add_to_date, base64_decode, base64_encode, calc, char_count, convert_time, and 64 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 70 tools appear to reach filesystem, shell / exec, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 20 of 70
  • add_to_date
  • base64_decode
  • base64_encode
  • calc
  • char_count
  • convert_time
  • current_datetime
  • day_of_week
  • days_between
  • factorial
  • from_base
  • gcd
  • git_blame
  • git_branches
  • git_diff
  • git_log
  • git_ls_files
  • git_show
  • git_status
  • hex_decode
All 70 tools →
release cadence · 90d 3 releases
06-18 00:00 08-01 00:00 now
recent releases last 3
version date src
v0.5.0 2026-08-26 github
v0.4.0 2026-08-26 github
v0.3.0 2026-07-12 github

view all →