io.github.vsh5dvsch7-png/yueying

The evidence

Every deduction below names the artefact that produced it. Nothing on this page was executed: the source was read, never run, and no running server was contacted.

Code Safety

• src/yueying/cli.py:192mcp-python-archive-extract-unconfined (critical/medium)

  An archive is extracted without validating member paths. A tar or zip entry may name `../` or an absolute path and write outside the destination; Python's extractall has historically done exactly that.

              times = fr.plan_times(meta["duration"], scenes, target)
              log(f"      场景切换 {len(scenes)} 处，抽 {len(times)} 帧")
              frame_list = fr.extract(video, times, os.path.join(out_dir, "frames"), dedupe=not a.no_dedupe, log=log)
              grids = fr.make_grids(frame_list, out_dir)
  

• src/yueying/report.py:148mcp-python-path-join-unvalidated (medium/low)

  A filesystem path is assembled from a value that is not a literal and opened without confinement. os.path.join discards the base entirely when the second component is absolute, and neither join nor `/` resolves `..`.

      rel = lambda p: os.path.relpath(p, out_dir).replace("\\", "/")
  
      with open(os.path.join(out_dir, "transcript.srt"), "w", encoding="utf-8") as f:
          for i, s in enumerate(segs, 1):
              f.write(f"{i}\n{_srt_ts(s['start'])} --> {_srt_ts(s['end'])}\n{s['text']}\n\n")

• src/yueying/report.py:152mcp-python-path-join-unvalidated (medium/low)

  A filesystem path is assembled from a value that is not a literal and opened without confinement. os.path.join discards the base entirely when the second component is absolute, and neither join nor `/` resolves `..`.

              f.write(f"{i}\n{_srt_ts(s['start'])} --> {_srt_ts(s['end'])}\n{s['text']}\n\n")
      paras = paragraphs(segs)
      with open(os.path.join(out_dir, "transcript.txt"), "w", encoding="utf-8") as f:
          for p in paras:
              f.write(f"[{fmt_time(p['start'])}] {p['text']}\n")

• src/yueying/report.py:221mcp-python-path-join-unvalidated (medium/low)

  A filesystem path is assembled from a value that is not a literal and opened without confinement. os.path.join discards the base entirely when the second component is absolute, and neither join nor `/` resolves `..`.

      if notes:
          manifest["notes"] = [str(n) for n in notes]
      with open(os.path.join(out_dir, "manifest.json"), "w", encoding="utf-8") as f:
          json.dump(manifest, f, ensure_ascii=False, indent=1)
      return manifest

• src/yueying/store.py:368mcp-python-path-join-unvalidated (medium/low)

  A filesystem path is assembled from a value that is not a literal and opened without confinement. os.path.join discards the base entirely when the second component is absolute, and neither join nor `/` resolves `..`.

      if sys.platform.startswith("linux"):
          try:
              with open(f"/proc/{pid}/stat", encoding="utf-8", errors="replace") as f:
                  stat = f.read()
              start_ticks = int(stat.rsplit(")", 1)[1].split()[19])      # field 22, after "(comm)"

Auth Posture

• authentication_model

  stdio transport: the client launches the server as a subprocess, so the OS process boundary is the auth boundary — `03` §4 does not penalise absent auth here

• transport_security

  declared transport: stdio — launched as a subprocess by the client, so the security boundary is the client process, not a network port (`03` §4)

• secret_handling

  no committed credential found, and no environment variable with a credential-shaped name is read anywhere in the source

• authorization_granularity

  6 tool registrations with conditional access logic present in the same source

Maintenance

• recency

  last commit 33 day(s) before 2026-10-16

• issue_responsiveness

  this repository has no issues `03` §5's window covers. An unanswered issue scores 0 under §5, but a repository with no issues filed has not failed to answer one.

• release_cadence

  median release gap 1 days (by releases), last release 33 day(s) ago

• bus_factor

  sole maintainer

• repository_signals

  `03` §5 scores this by quartile WITHIN the server's category, which needs a distribution across every scanned server and so cannot be computed while scanning one. It is a post-pass over the crawl and that pass does not exist yet.

Transparency

• license

  LICENSE present with no SPDX-License-Identifier tag; identified as 'MIT' from its text

• readme_quality

  README.md: installation instructions (+25), configuration documented (+25), exposed tools or resources enumerated (+30), states what the server does in the first 200 words (+20)

• declared_scopes

  specific scope or access documentation is present, but `03` §7's 100 and 60 bands both compare it against scopes INFERRED from static analysis, which is not built yet. Scoring 100 on an empty inference would be a vacuous truth — 'all ∅ inferred scopes are documented'.

• changelog

  CHANGELOG.md present

• security_contact

  SECURITY.md present