How sazabi/cve.now works
This repository is cve.now’s public GitHub home, not the service implementation: the README says the service runs from a private monorepo. The documented user workflow is to query the hosted service—through feeds, the web/API, or MCP—and receive vulnerability results; users can also submit a lockfile for a version-specific check. The graph captures those documented capabilities and the plugin metadata present here. Service internals and their implementation paths are unavailable, so service nodes have null paths and edges rely on README documentation.
Main entry points: plugin MCP plugin package · plugin.json Plugin metadata · mcp.json MCP configuration
Components 14
Discovery and feeds
- Unified vulnerability catalog
- Search and entity lookup
- RSS, Atom, JSON feeds
Stack checking
- Version-specific stack check
- Shareable stack report
Service access
- cve.now web pages
- JSON API
- Remote MCP server
- MCP plugin package
plugin - Plugin metadata
plugin/plugin.json - MCP configuration
plugin/mcp.json
Other components
- Developer or agent
- Lockfile
- Vulnerability sources
Connections 16
- Vulnerability sources → Unified vulnerability catalog: contributes records
README.md - Unified vulnerability catalog → Search and entity lookup: supports lookup
README.md - Unified vulnerability catalog → RSS, Atom, JSON feeds: publishes entries
README.md - Developer or agent → RSS, Atom, JSON feeds: requests filtered feed
README.md - Developer or agent → Search and entity lookup: searches vulnerabilities
README.md - Developer or agent → cve.now web pages: views entry
README.md - Developer or agent → JSON API: requests data
README.md - Developer or agent → Lockfile: uploads
README.md - Lockfile → Version-specific stack check: checks versions
README.md - Version-specific stack check → Shareable stack report: returns report
README.md - Developer or agent → Remote MCP server: invokes tools
README.md - Remote MCP server → Search and entity lookup: offers operations
README.md - Remote MCP server → Version-specific stack check: offers operation
README.md - MCP plugin package → Plugin metadata: includes metadata
README.md - MCP plugin package → MCP configuration: configures server
README.md - MCP plugin package → Remote MCP server: packages same server
README.md