dev.codepathfinder/pathfinder

MCPcommunity
v2.1.1dev.codepathfinderUnknownUpdated 2mo agoGitHub

Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.

Open-source SAST engine that traces vulnerabilities across files and functions Website · Docs · Rule Registry · MCP Server · Blog Scan a Python project (rules download automatically): No config files, no API keys, no cloud accounts. Results in your terminal in seconds. Code Pathfinder is an open-source static analysis engine that builds a graph of your codebase and traces how data flows through…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
2mo agoLast update
Package
Authordev.codepathfinder
LicenseUnknown
Version2.1.1
Sourcemcp-registry
Trust Status
B
60/100Good
Listed in Forge index+10/10
Publisher identity verified+0/25
Publisher: run `forge publish` from the package repo to claim ownership
Ed25519 publish signature+0/10
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
CVE scan · clean+30/30
Static analysis · clean+20/20
npm provenance (Sigstore)+0/5
Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
DependenciesNot audited
Tool surface
Security scan✓ Cleanv2.1.1 · 19d ago
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Open-source SAST engine that traces vulnerabilities across files and functions Website · Docs · Rule Registry · MCP Server · Blog Scan a Python project (rules download automatically): No config files, no API keys, no cloud accounts. Results in your terminal in seconds. Code Pathfinder is an open-source static analysis engine that builds a graph of your codebase and traces how data flows through it. It parses source code into Abstract Syntax Trees, constructs call graphs across files, and runs…

Keywords
mcp