Is opengrok-mcp-server safe to install?

opengrok-mcp-server was flagged as CRITICAL RISK (risk score 1220) with 84 findings detected across 11 files. Review the findings before installing.

What security issues were found in opengrok-mcp-server?

Sigil detected 84 findings in opengrok-mcp-server, including patterns related to code_patterns, credentials, obfuscation. See the full scan report for details.

Scans/npm/opengrok-mcp-server

opengrok-mcp-server

npm

Summary

opengrok-mcp-server v9.2.8 was classified as CRITICAL RISK with a risk score of 1220. Sigil detected 84 findings across 11 files, covering phases including code patterns, credential access, obfuscation. Review the findings below before installing this package.

CRITICAL RISK(1220)

v9.2.8

10 April 2026, 18:11 UTC

by Sigil Bot

Risk Score

1220

Findings

Files Scanned

Provenance

Registry

https://www.npmjs.com/package/opengrok-mcp-server/v/9.2.8

Scanned From

https://registry.npmjs.org/opengrok-mcp-server/-/opengrok-mcp-server-9.2.8.tgz

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/npm/opengrok-mcp-server)](https://sigilsec.ai/scans/4D0C2872-4632-4088-B0A7-0F4F12831A29)

HTML

<a href="https://sigilsec.ai/scans/4D0C2872-4632-4088-B0A7-0F4F12831A29"><img src="https://sigilsec.ai/badge/npm/opengrok-mcp-server" alt="Sigil Scan"></a>

Run This Scan Yourself