1 check that ran failed — version behavior — so this release can’t be trusted as-is.
- Publisher
- io.github.BargLabs
- Repository
- github.com/BargLabs/cejel
- Install
- oci:ghcr.io/barglabs/cejel:0.1.6, oci:ghcr.io/barglabs/cejel:0.1.7, oci:ghcr.io/barglabs/cejel:0.1.8, oci:ghcr.io/barglabs/cejel:0.1.10, oci:ghcr.io/barglabs/cejel:0.1.9, oci:ghcr.io/barglabs/cejel:0.2.0, oci:ghcr.io/barglabs/cejel:0.2.2, oci:ghcr.io/barglabs/cejel@sha256:7c9ea3ef1ab20e5cafcc015d60b3d8662ec1cdab5ee2df5071c4af1007e6dc7f, oci:ghcr.io/barglabs/cejel@sha256:63bd4342c2006c823b0283313036109040651741078e1a0e38677d605a2849ee, oci:ghcr.io/barglabs/cejel@sha256:db0cbf9a7c24202d45001d2a2ad5482cb96cd1295ce9f0182ffa69f495c2a4cb, oci:ghcr.io/barglabs/cejel@sha256:9254358dc9997b50eafcd8e0edf9fb9f05ad4fd7fbf32afbf874a26c46e1e032, oci:ghcr.io/barglabs/cejel@sha256:c5ff77db5c79c2af081a26ba8b1bc074e211b8099fc6dfd8ccabef2c8e7b3ff3, oci:ghcr.io/barglabs/cejel@sha256:2e443b621f884e351c88aee926f1be9357bdee707e66fa54e9e442cf0cd44211, oci:ghcr.io/barglabs/cejel@sha256:f1cd2356cc0072ad08e24fcddc379206ee07f5699b9a633164326917f665b6d6
- Versions
- 14
- Inspected
- 4 of 6 checks · 65%
- Scored
- 2026-09-01 · rubric 1.0.0
What we checked
Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.
Injection surface
unscannable25% of gradeTool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).
No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.
Supply chain
pass25% of gradePackage provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.
repository linkage verified
Credential hygiene
pass15% of gradeHow the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.
No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.
Permission scope
pass15% of gradeDeclared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.
No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.
Version behavior
fail10% of gradeDiff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).
vs prior 0.4.4 (patch bump): new hardcoded outbound host/BCC destination(s): cejel.dev, github.com.
Transport config
unscannable10% of gradeRemote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.
local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.
Version history
Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.
| Version | Published | Grade | Score | Inspected | Change |
|---|---|---|---|---|---|
| v0.4.5 · current | 2026-08-25 | B | 90 | 4/6 · 65% | ±0 |
| v0.4.4 | 2026-08-18 | B | 100 | 4/6 · 65% | ±0 |
| v0.4.3 | 2026-08-17 | B | 100 | 3/6 · 55% | ±0 |
| v0.4.2 | 2026-08-14 | B | 100 | 4/6 · 65% | ±0 |
| v0.4.1 | 2026-08-13 | B | 100 | 4/6 · 65% | ±0 |
| v0.4.0 | 2026-08-09 | B | 100 | 4/6 · 65% | ±0 |
| v0.3.2 | 2026-08-07 | B | 100 | 4/6 · 65% | ±0 |
| v0.2.2 | 2026-07-29 | B | 100 | 4/6 · 65% | ±0 |
| v0.2.0 | 2026-07-25 | B | 100 | 3/6 · 55% | ±0 |
| v0.1.8 | 2026-07-21 | B | 100 | 4/6 · 65% | ±0 |
| v0.1.7 | 2026-07-20 | B | 100 | 4/6 · 65% | ±0 |
| v0.1.6 | 2026-07-17 | B | 100 | 3/6 · 55% | — |