backlog-mcp-server
v0.7.0  
4
Total
4
Critical
0
High
0
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
18: }
19: // Priority:ENV → config → fallback
>>> 20: const value = process.env[toEnvKey(upperKey)] || config[upperKey] || fallback;
21: usedKeys[upperKey] = value;
22: return value;Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
1: import pino from 'pino';
>>> 2: if (!process.env.NODE_ENV) {
3: process.env.NODE_ENV = 'production';
4: }Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
1: import pino from 'pino';
2: if (!process.env.NODE_ENV) {
>>> 3: process.env.NODE_ENV = 'production';
4: }
5: const isProd = process.env.NODE_ENV === 'production';Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
3: process.env.NODE_ENV = 'production';
4: }
>>> 5: const isProd = process.env.NODE_ENV === 'production';
6: export const logger = pino({
7: level: isProd ? 'error' : 'debug',Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 25, 2026 | critical | 4 | 88 | 0.00s |
| Feb 23, 2026 | critical | 4 | 88 | 0.00s |
| Feb 22, 2026 | critical | 4 | 88 | 0.00s |