JavaSinkTracer MCP
mcp-serverStable
基于函数级污点分析的 Java 源代码漏洞审计工具JavaSinkTracer，通过 Model Context Protocol (MCP) 为 AI 助手提供安全分析能力。
Stars
116
Δ stars 7d
+0
Δ stars 30d
—
Forks
13
Contributors
1
npm DL / wk
—
PyPI DL / wk
—
Language
Python
Last push
2025-10-07
About JavaSinkTracer MCP
基于函数级污点分析的 Java 源代码漏洞审计工具JavaSinkTracer，通过 Model Context Protocol (MCP) 为 AI 助手提供安全分析能力。 1. 解析 Java 源代码，构建 AST 2. 提取所有类和方法信息 3. 构建函数调用关系图 4. 从 Sink 点（危险函数）反向追踪 5. 识别到达 Source 点（外部入口）的调用链 6. 过滤无参数的函数（排除不可控变量） 7. 提取调用链上所有函数的源代码 `find_vulnerabilities` 工具默认使用轻量级模式： - 仅返回漏洞链路信息 - 不立即提取源代码 - 需要时使用 `analyze_vulnerability_chain` 获取详细代码
Read the full README on GitHub →
Growth score: 0/100 week of 2026-06-29
Signal history
| Week | Score | Δ★ | Signal |
|---|---|---|---|
| 2026-06-29 | 0 | +0 | Stable |
| 2026-06-15 | 0 | +0 | Stable |
JavaSinkTracer MCP alternatives
Projects in the same category, closest in size — picked by data, not opinion.
See all mcp-server projects ranked by growth →
Frequently asked questions
- Is JavaSinkTracer MCP still maintained?
- Activity is low: the last push was on 2025-10-07 (276 days before our latest snapshot).
- Is JavaSinkTracer MCP growing?
- It is stable this week, with a growth score of 0/100. See the weekly history above.
- What are the best JavaSinkTracer MCP alternatives?
- Closest by category and size in our data: io.github.pnp/cli-microsoft365-mcp-server, io.github.gaopengbin/cesium-mcp-dev, com.apple-rag/mcp-server — full list with live signals above.
Embed this badge
Show your project's live signal in your README — it updates weekly with the data.
Tracked since 2026-06-20 · data as of 2026-07-10 · 3 open issues · 0 releases