{
 "analyzed": 7760,
 "date": "2026-11-06",
 "discovered": 80742,
 "fetched": 7837,
 "mcp_packages": {
  "npm:@21st-dev/magic": 9,
  "npm:@angular/cli": 24,
  "npm:@azure-devops/mcp": 6,
  "npm:@azure/mcp": 5,
  "npm:@browsermcp/mcp": 8,
  "npm:@chakra-ui/react-mcp": 5,
  "npm:@eslint/mcp": 5,
  "npm:@executeautomation/playwright-mcp-server": 11,
  "npm:@heroui/react-mcp": 5,
  "npm:@magicuidesign/mcp": 8,
  "npm:@mobilenext/mobile-mcp": 11,
  "npm:@modelcontextprotocol/server-brave-search": 6,
  "npm:@modelcontextprotocol/server-filesystem": 49,
  "npm:@modelcontextprotocol/server-github": 78,
  "npm:@modelcontextprotocol/server-memory": 40,
  "npm:@modelcontextprotocol/server-postgres": 26,
  "npm:@modelcontextprotocol/server-puppeteer": 8,
  "npm:@modelcontextprotocol/server-sequential-thinking": 59,
  "npm:@notionhq/notion-mcp-server": 6,
  "npm:@playwright/mcp": 227,
  "npm:@sentry/mcp-server": 8,
  "npm:@supabase/mcp-server-supabase": 49,
  "npm:@sveltejs/mcp": 14,
  "npm:@upstash/context7-mcp": 194,
  "npm:agentation-mcp": 5,
  "npm:agentkits-memory-server": 5,
  "npm:chrome-devtools-mcp": 97,
  "npm:create-better-t-stack": 9,
  "npm:firebase-tools": 13,
  "npm:firecrawl-mcp": 9,
  "npm:gitnexus": 8,
  "npm:mcp-remote": 40,
  "npm:mongodb-mcp-server": 6,
  "npm:next-devtools-mcp": 33,
  "npm:nx": 11,
  "npm:nx-mcp": 12,
  "npm:playwright": 5,
  "npm:rea-agents": 5,
  "npm:shadcn": 87,
  "npm:task-master-ai": 25,
  "npm:trigger.dev": 8,
  "npm:tsx": 22,
  "npm:xcodebuildmcp": 10,
  "oci:ghcr.io/github/github-mcp-server": 9,
  "oci:hashicorp/terraform-mcp-server": 11,
  "pypi:blender-mcp": 9,
  "pypi:code-review-graph": 19,
  "pypi:git+https://github.com/oraios/serena": 5,
  "pypi:mcp-nixos": 5,
  "pypi:mcp-server-fetch": 16,
  "pypi:mcp-server-git": 11,
  "pypi:postgres-mcp": 5,
  "pypi:serena": 31
 },
 "min_cell": 5,
 "policy_version": "0.9.0",
 "popular": {
  "agent_workflows": {
   "any": {
    "of": 203,
    "pct": 7.4,
    "repos": 15
   },
   "contents_write": {
    "of": 15,
    "pct": 33.3,
    "repos": 5
   },
   "id_token_write": {
    "of": 15,
    "pct": 53.3,
    "repos": 8
   },
   "skip_permissions": {
    "of": 15,
    "pct": 6.7,
    "repos": 1
   }
  },
  "allow_rules": {
   "bash_star_and_bypass": 0,
   "bash_star_of_with_allow_pct": 36.1,
   "repos_with_allow": 61,
   "repos_with_deny": 18,
   "total": 2551,
   "wildcard": 2134,
   "wildcard_of_with_allow_pct": 90.2
  },
  "any_finding": {
   "of": 203,
   "pct": 66.5,
   "repos": 135
  },
  "claude_code": {
   "allows_bash_star": {
    "of": 176,
    "pct": 12.5,
    "repos": 22
   },
   "any_wildcard_allow": {
    "of": 176,
    "pct": 31.2,
    "repos": 55
   },
   "bypass_permissions": {
    "of": 176,
    "pct": 0.0,
    "repos": 0
   },
   "deny_rules": {
    "of": 176,
    "pct": 10.2,
    "repos": 18
   },
   "repos": 176
  },
  "components": {
   "marketplaces": 58,
   "plugins": 453,
   "repos_with_skills": 72,
   "repos_with_subagents": 20,
   "skills": 690,
   "subagents": 128
  },
  "default_modes": {
   "acceptEdits": 2
  },
  "environment": {
   "any_finding": {
    "of": 74,
    "pct": 21.6,
    "repos": 16
   },
   "auto_installed_extension": {
    "of": 74,
    "pct": 6.8,
    "repos": 5
   },
   "devcontainer": {
    "of": 74,
    "pct": 8.1,
    "repos": 6
   },
   "devcontainer_feature": {
    "of": 74,
    "pct": null,
    "repos": null
   },
   "editor_startup_file": {
    "of": 74,
    "pct": null,
    "repos": null
   },
   "extension_recommendations": {
    "of": 74,
    "pct": 10.8,
    "repos": 8
   },
   "host_command": {
    "of": 74,
    "pct": null,
    "repos": null
   },
   "lifecycle_command": {
    "of": 74,
    "pct": null,
    "repos": null
   },
   "pre_commit": {
    "of": 74,
    "pct": 9.5,
    "repos": 7
   },
   "repos": 74,
   "rules_firing": {
    "policy.agent-hook-command-change": {
     "pct": 12.2,
     "repos": 9
    },
    "policy.unpinned-agent-component": {
     "pct": 20.3,
     "repos": 15
    }
   },
   "tag_pinned_hook_repo": {
    "of": 74,
    "pct": 8.1,
    "repos": 6
   },
   "tag_pinned_hook_repo_of_pre_commit": {
    "of": 7,
    "pct": 85.7,
    "repos": 6
   },
   "totals": {
    "extensions": 21,
    "extensions_unpinned": 21,
    "features": 13,
    "features_unpinned": 13,
    "hook_commands": 21,
    "hook_dependencies": 20,
    "hook_dependencies_unpinned": 19,
    "hook_repos": 21,
    "hook_repos_unpinned": 21,
    "host_commands": null,
    "jetbrains_plugins": 0,
    "lifecycle_commands": 9,
    "recommended_extensions": 38,
    "startup_files": null
   },
   "unpinned_extension": {
    "of": 74,
    "pct": 6.8,
    "repos": 5
   },
   "unpinned_extension_of_installers": {
    "of": 5,
    "pct": 100.0,
    "repos": 5
   },
   "unpinned_feature": {
    "of": 74,
    "pct": null,
    "repos": null
   }
  },
  "hook_classes": {
   "network-fetch": 1,
   "other": 18,
   "package-runner": 4,
   "script-file": 21
  },
  "hook_events": {
   "BeforeAgent": 1,
   "PostToolUse": 19,
   "PreCompact": 1,
   "PreToolUse": 17,
   "SessionEnd": 2,
   "SessionStart": 12,
   "Stop": 8,
   "StopFailure": 1,
   "SubagentStart": 1,
   "SubagentStop": 1,
   "TaskCompleted": 1,
   "UserPromptSubmit": 7,
   "afterFileEdit": 3,
   "afterShellExecution": 1,
   "beforeReadFile": 1,
   "beforeShellExecution": 4,
   "beforeSubmitPrompt": 2,
   "postToolUse": 2,
   "postToolUseFailure": 1,
   "preCompact": 2,
   "preToolUse": 2,
   "sessionEnd": 1,
   "sessionStart": 2,
   "stop": 2,
   "subagentStart": 2,
   "subagentStop": 2
  },
  "hooks": {
   "any_hook": {
    "of": 203,
    "pct": 18.7,
    "repos": 38
   },
   "network_fetch": {
    "of": 38,
    "pct": 2.6,
    "repos": 1
   },
   "package_runner": {
    "of": 38,
    "pct": 10.5,
    "repos": 4
   },
   "pipe_to_shell": {
    "of": 38,
    "pct": 0.0,
    "repos": 0
   },
   "session_start_hook": {
    "of": 203,
    "pct": 5.9,
    "repos": 12
   }
  },
  "hosts": {
   "claude-code": 176,
   "codex": 25,
   "cursor": 15,
   "gemini-cli": 14,
   "kiro": 1,
   "vscode": 6
  },
  "incomplete": 64,
  "kinds": {
   "claude-settings": 82,
   "codex-config": 20,
   "cursor-mcp": 6,
   "gemini-settings": 14,
   "mcp-json": 91
  },
  "mcp": {
   "any_server": {
    "of": 203,
    "pct": 51.2,
    "repos": 104
   },
   "packaged_servers": 69,
   "remote_servers_pct": 30.1,
   "repos_with_unpinned": {
    "of": 104,
    "pct": 25.0,
    "repos": 26
   },
   "servers": 219,
   "unpinned_packaged_pct": 85.5
  },
  "mcp_totals": {
   "packaged": 69,
   "registries": {
    "npm": 44,
    "oci": 1,
    "pypi": 3
   },
   "remote": 66,
   "repos_all_unpinned": 26,
   "servers": 219,
   "stdio": 153,
   "unpinned": 59
  },
  "repos": 203,
  "rules_firing": {
   "policy.agent-hook-command-change": {
    "pct": 19.2,
    "repos": 39
   },
   "policy.agent-sandbox-weakened": {
    "pct": 0.5,
    "repos": 1
   },
   "policy.component-self-grant": {
    "pct": 12.8,
    "repos": 26
   },
   "policy.component-shell-execution": {
    "pct": 1.0,
    "repos": 2
   },
   "policy.credentialed-remote-mcp-server": {
    "pct": 2.5,
    "repos": 5
   },
   "policy.hardcoded-secrets": {
    "pct": 3.0,
    "repos": 6
   },
   "policy.permission-bypass-from-project": {
    "pct": 0.5,
    "repos": 1
   },
   "policy.secret-exposed-to-untrusted-agent-run": {
    "pct": 4.4,
    "repos": 9
   },
   "policy.unpinned-agent-component": {
    "pct": 36.5,
    "repos": 74
   },
   "policy.widened-permission-rule": {
    "pct": 19.7,
    "repos": 40
   },
   "policy.workspace-scope-expansion": {
    "pct": 1.0,
    "repos": 2
   }
  },
  "secrets": {
   "of": 203,
   "pct": 3.0,
   "repos": 6
  },
  "severities": {
   "high": 5,
   "low": 130,
   "medium": 11
  },
  "stars": {
   "1000_plus": 60,
   "100_plus": 203,
   "median": 386
  },
  "workflow_totals": {
   "agent_workflows": 38,
   "contents_write": 7,
   "id_token_write": 28,
   "skip_permissions": 1
  },
  "worst_reachable": {
   "code-execution": 64,
   "external-communication": 8,
   "none": 50,
   "unclassified": 79,
   "write-access": 2
  }
 },
 "popular_stars": 100,
 "scanner_version": "0.7.1",
 "segment": {
  "agent_workflows": {
   "any": {
    "of": 7760,
    "pct": 2.8,
    "repos": 221
   },
   "contents_write": {
    "of": 221,
    "pct": 31.7,
    "repos": 70
   },
   "id_token_write": {
    "of": 221,
    "pct": 81.4,
    "repos": 180
   },
   "skip_permissions": {
    "of": 221,
    "pct": 1.8,
    "repos": 4
   }
  },
  "allow_rules": {
   "bash_star_and_bypass": 31,
   "bash_star_of_with_allow_pct": 32.7,
   "repos_with_allow": 2829,
   "repos_with_deny": 833,
   "total": 75603,
   "wildcard": 54174,
   "wildcard_of_with_allow_pct": 69.9
  },
  "any_finding": {
   "of": 7760,
   "pct": 61.8,
   "repos": 4799
  },
  "claude_code": {
   "allows_bash_star": {
    "of": 6622,
    "pct": 14.0,
    "repos": 924
   },
   "any_wildcard_allow": {
    "of": 6622,
    "pct": 29.9,
    "repos": 1977
   },
   "bypass_permissions": {
    "of": 6622,
    "pct": 1.5,
    "repos": 98
   },
   "deny_rules": {
    "of": 6622,
    "pct": 12.6,
    "repos": 833
   },
   "repos": 6622
  },
  "components": {
   "marketplaces": 1245,
   "plugins": 11466,
   "repos_with_skills": 2285,
   "repos_with_subagents": 978,
   "skills": 22788,
   "subagents": 5790
  },
  "default_modes": {
   "acceptEdits": 53,
   "auto": 17,
   "bypassPermissions": 62,
   "default": 14,
   "dontAsk": 1,
   "manual": 3,
   "plan": 9
  },
  "environment": {
   "any_finding": {
    "of": 2593,
    "pct": 9.5,
    "repos": 247
   },
   "auto_installed_extension": {
    "of": 2593,
    "pct": 1.9,
    "repos": 49
   },
   "devcontainer": {
    "of": 2593,
    "pct": 2.3,
    "repos": 59
   },
   "devcontainer_feature": {
    "of": 2593,
    "pct": 1.2,
    "repos": 31
   },
   "editor_startup_file": {
    "of": 2593,
    "pct": null,
    "repos": null
   },
   "extension_recommendations": {
    "of": 2593,
    "pct": 5.4,
    "repos": 141
   },
   "host_command": {
    "of": 2593,
    "pct": 0.4,
    "repos": 11
   },
   "lifecycle_command": {
    "of": 2593,
    "pct": 2.0,
    "repos": 53
   },
   "pre_commit": {
    "of": 2593,
    "pct": 3.6,
    "repos": 93
   },
   "repos": 2593,
   "rules_firing": {
    "policy.agent-hook-command-change": {
     "pct": 4.1,
     "repos": 107
    },
    "policy.unpinned-agent-component": {
     "pct": 8.9,
     "repos": 231
    }
   },
   "tag_pinned_hook_repo": {
    "of": 2593,
    "pct": 2.7,
    "repos": 70
   },
   "tag_pinned_hook_repo_of_pre_commit": {
    "of": 93,
    "pct": 75.3,
    "repos": 70
   },
   "totals": {
    "extensions": 297,
    "extensions_unpinned": 296,
    "features": 76,
    "features_unpinned": 66,
    "hook_commands": 258,
    "hook_dependencies": 82,
    "hook_dependencies_unpinned": 65,
    "hook_repos": 266,
    "hook_repos_unpinned": 179,
    "host_commands": 12,
    "jetbrains_plugins": null,
    "lifecycle_commands": 86,
    "recommended_extensions": 549,
    "startup_files": null
   },
   "unpinned_extension": {
    "of": 2593,
    "pct": 1.9,
    "repos": 49
   },
   "unpinned_extension_of_installers": {
    "of": 49,
    "pct": 100.0,
    "repos": 49
   },
   "unpinned_feature": {
    "of": 2593,
    "pct": 1.2,
    "repos": 30
   }
  },
  "hook_classes": {
   "network-fetch": 6,
   "other": 498,
   "package-runner": 65,
   "pipe-to-shell": 22,
   "script-file": 1180
  },
  "hook_events": {
   "AfterAgent": 29,
   "AfterModel": 10,
   "AfterTool": 45,
   "BeforeAgent": 24,
   "BeforeModel": 7,
   "BeforeTool": 37,
   "BeforeToolSelection": 7,
   "ConfigChange": 3,
   "CwdChanged": 1,
   "DirectoryAdded": 2,
   "FileChanged": 4,
   "InstructionsLoaded": 5,
   "MessageDisplay": 1,
   "Notification": 84,
   "PermissionDenied": 1,
   "PermissionRequest": 12,
   "PostCompact": 17,
   "PostToolBatch": 2,
   "PostToolUse": 751,
   "PostToolUseFailure": 28,
   "PreCommit": 1,
   "PreCompact": 96,
   "PreCompress": 12,
   "PreToolUse": 823,
   "SessionEnd": 78,
   "SessionStart": 610,
   "Setup": 3,
   "Stop": 509,
   "StopFailure": 10,
   "SubagentStart": 62,
   "SubagentStop": 98,
   "TaskCompleted": 19,
   "TaskCreated": 7,
   "TeammateIdle": 9,
   "UserPromptExpansion": 1,
   "UserPromptSubmit": 279,
   "WorktreeCreate": 17,
   "WorktreeRemove": 5,
   "afterAgentResponse": 3,
   "afterFileEdit": 27,
   "afterMCPExecution": 8,
   "afterShellExecution": 9,
   "afterTabFileEdit": 5,
   "agentStop": 1,
   "beforeMCPExecution": 9,
   "beforeReadFile": 10,
   "beforeShellExecution": 36,
   "beforeSubmitPrompt": 25,
   "beforeTabFileRead": 4,
   "postToolUse": 26,
   "postToolUseFailure": 3,
   "preCompact": 13,
   "preToolUse": 32,
   "sessionEnd": 21,
   "sessionStart": 35,
   "stop": 41,
   "subagentStart": 13,
   "subagentStop": 14,
   "userPromptSubmitted": 1,
   "workspaceOpen": 1
  },
  "hooks": {
   "any_hook": {
    "of": 7760,
    "pct": 20.1,
    "repos": 1562
   },
   "network_fetch": {
    "of": 1562,
    "pct": 0.4,
    "repos": 6
   },
   "package_runner": {
    "of": 1562,
    "pct": 4.2,
    "repos": 65
   },
   "pipe_to_shell": {
    "of": 1562,
    "pct": 1.4,
    "repos": 22
   },
   "session_start_hook": {
    "of": 7760,
    "pct": 7.9,
    "repos": 610
   }
  },
  "hosts": {
   "claude-code": 6622,
   "codex": 794,
   "copilot": 2,
   "cursor": 539,
   "gemini-cli": 419,
   "kiro": 27,
   "roo": 11,
   "vscode": 210
  },
  "incomplete": 1561,
  "kinds": {
   "claude-settings": 3858,
   "codex-config": 562,
   "cursor-mcp": 394,
   "gemini-settings": 331,
   "mcp-json": 2815
  },
  "mcp": {
   "any_server": {
    "of": 7760,
    "pct": 43.3,
    "repos": 3360
   },
   "packaged_servers": 2743,
   "remote_servers_pct": 37.0,
   "repos_with_unpinned": {
    "of": 3360,
    "pct": 32.6,
    "repos": 1097
   },
   "servers": 8203,
   "unpinned_packaged_pct": 91.1
  },
  "mcp_totals": {
   "packaged": 2743,
   "registries": {
    "npm": 1838,
    "oci": 43,
    "pypi": 300
   },
   "remote": 3037,
   "repos_all_unpinned": 1062,
   "servers": 8203,
   "stdio": 5166,
   "unpinned": 2498
  },
  "repos": 7760,
  "rules_firing": {
   "policy.agent-hook-command-change": {
    "pct": 20.7,
    "repos": 1605
   },
   "policy.agent-sandbox-weakened": {
    "pct": 0.7,
    "repos": 52
   },
   "policy.component-self-grant": {
    "pct": 12.9,
    "repos": 1000
   },
   "policy.component-shell-execution": {
    "pct": 1.2,
    "repos": 92
   },
   "policy.credentialed-remote-mcp-server": {
    "pct": 2.0,
    "repos": 155
   },
   "policy.hardcoded-secrets": {
    "pct": 2.0,
    "repos": 158
   },
   "policy.overprivileged-agent-workflow": {
    "pct": 0.1,
    "repos": 4
   },
   "policy.permission-bypass-from-project": {
    "pct": 1.8,
    "repos": 137
   },
   "policy.secret-exposed-to-untrusted-agent-run": {
    "pct": 2.2,
    "repos": 171
   },
   "policy.unpinned-agent-component": {
    "pct": 21.9,
    "repos": 1699
   },
   "policy.widened-permission-rule": {
    "pct": 25.3,
    "repos": 1965
   },
   "policy.workspace-scope-expansion": {
    "pct": 2.2,
    "repos": 171
   }
  },
  "secrets": {
   "of": 7760,
   "pct": 2.0,
   "repos": 158
  },
  "severities": {
   "critical": 32,
   "high": 107,
   "low": 4702,
   "medium": 200
  },
  "stars": {
   "1000_plus": 60,
   "100_plus": 203,
   "median": 0
  },
  "workflow_totals": {
   "agent_workflows": 437,
   "contents_write": 93,
   "id_token_write": 351,
   "skip_permissions": 5
  },
  "worst_reachable": {
   "code-execution": 2938,
   "external-communication": 577,
   "none": 2380,
   "unclassified": 1743,
   "write-access": 122
  }
 },
 "source": "github",
 "source_label": "GitHub"
}