package.json

{
  "name": "codeinspectus",
  "version": "1.5.0",
  "mcpName": "io.github.Synvoya/codeinspectus",
  "description": "CodeInspectus, by Synvoya — a local-first, privacy-preserving security MCP server that scans AI-generated code for real vulnerabilities, maps findings to compliance frameworks, and drives a scan → fix → rescan loop. Zero network egress at scan time.",
  "license": "MIT",
  "author": "Synvoya",
  "homepage": "https://codeinspectus.com",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Synvoya/codeinspectus.git"
  },
  "bugs": {
    "url": "https://github.com/Synvoya/codeinspectus/issues"
  },
  "type": "module",
  "bin": {
    "codeinspectus": "dist/index.js"
  },
  "files": [
    "dist",
    "data",
    "detection-db",
    "engines.lock.json",
    "README.md",
    "THIRD-PARTY-NOTICES.md"
  ],
  "engines": {
    "node": ">=22"
  },
  "scripts": {
    "typecheck": "tsc --noEmit",
    "build": "tsc --noEmit && tsup",
    "dev": "tsx src/index.ts",
    "start": "node dist/index.js",
    "test": "vitest run",
    "test:redaction": "node scripts/redaction-e2e.mjs",
    "shadow:opengrep": "tsx scripts/opengrep-shadow.ts",
    "eval": "tsx evals/run-evals.ts",
    "inspector": "npx @modelcontextprotocol/inspector node dist/index.js"
  },
  "keywords": [
    "mcp",
    "security",
    "sast",
    "secrets",
    "sca",
    "sbom",
    "compliance",
    "opengrep",
    "gitleaks",
    "trivy",
    "ai-code",
    "local-first",
    "mcp-server",
    "claude-code",
    "cursor",
    "codex",
    "vibe-coding",
    "supabase",
    "owasp",
    "appsec",
    "application-security"
  ],
  "dependencies": {
    "@lezer/python": "1.1.19",
    "@modelcontextprotocol/sdk": "^1.30.0",
    "smol-toml": "1.7.1",
    "yaml": "2.9.0",
    "zod": "^3.25.1"
  },
  "devDependencies": {
    "@types/node": "^22.10.0",
    "tsup": "^8.5.1",
    "tsx": "^4.19.0",
    "typescript": "^5.7.0",
    "vitest": "^4.1.9"
  }
}