Loading the registry…
Linear integration for OpenClaw — webhook routing, issue management, and project tools via the Linear GraphQL API
We found this by crawling public sources and nobody has attested to it. That is how most of the registry gets here, and it is not a mark against the artifact — it only means no authenticated act of publication is on record. An artifact can be the vendor's own and still appear here.
27 critical findings reported by osv-scanner. The composite score alone does not reflect this — read the per-scanner reports below.
npm: openclaw-linear @ 0.7.1, 0 findings
Choose your runtime: the CLI writes the mcpServers config entry for that target.
nerlo install --target claude-code -- openclaw-linear
Install respects the composite badge: Clean proceeds, Caution prompts for confirmation, and Flagged is refused. Write operations require an API token.
8 of 11 scanners examined this package. The rest do not apply to it — language, ecosystem and packaging decide which analyzers can say anything, and a scanner that cannot examine an artifact reports nothing rather than passing it.
v1.4.0
0 findings · 0.7s
v2.0.11
11 findings · 8.1s
v0.3.74
8 findings · 3.4s
v0.1.0
2 findings · 3.7s
v0.1.0
0 findings · 3.7s
v0.1.0
0 findings · 7.5s
v0.71.0
0 findings · 0.2s
v2.3.8
503 findings · 8.3s
vv0.3.2
No Go packages were found in this artifact. What each scanner covers
0 findings · 0.1s
v0.71.0
No container image was published for this artifact. What each scanner covers
0 findings · 0.0s
vv1.6.0
No Go modules were found in this artifact. What each scanner covers
0 findings · 0.1s
1 scan on record. Every scan's full results are retained immutably for 24 months.
| Completed | Composite | Change | Scanners | Status |
|---|---|---|---|---|
| Aug 20, 2026 | Flagged68 | — | agentshield: completecisco-skill-scanner: completeagent-audit-kit: completenerlo-behavioral: completenerlo-install-instruction: completecapslock ·n/a: not applicablenerlo-multi-source: completetrivy: completeosv-scanner: completetrivy_image ·n/a: not applicablegovulncheck ·n/a: not applicable | completed |
Findings in files this artifact installs stand as reported; a model re-read the rest and said which ones it believes are false positives. This is a second opinion published beside the evidence, not a correction to it: the per-scanner reports above are unchanged, every dismissed finding is still listed there at its original severity, and the score and the Flagged badge are computed from those raw severities alone. Nothing below moved them.
Out of 524 findings across every scanner that examined this package. None of the 27 findings rated critical by their scanner were dismissed.
Not reviewed is not the same as clean. Those 350 findings stand exactly as their scanners reported them, at full severity, as they would have without this review.
Two keys had to turn. The model had to name a reason from a fixed list of six, and a deterministic check of ours — over which files this artifact actually installs — had to independently agree. Anything it could not corroborate is in “not reviewed” above, at full severity.
1 Agent instruction file — The match is in a file that instructs an AI coding agent — a CLAUDE.md or similar. It is documentation of intent, and our own check confirmed it is not part of what gets installed.
Rules: AAK-AGENT-003 · Files: CLAUDE.md · reported by agent-audit-kit
The model could have called any of these a false positive and did not.
3 GHSA-3jxr-9vmj-r5cp
Files: /repo/package-lock.json · reported by osv-scanner
3 GHSA-mh99-v99m-4gvg
Files: /repo/package-lock.json · reported by osv-scanner
3 GHSA-rgw5-rvv9-x895
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-28wg-ghj8-5hjv
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-66ff-xgx4-vchm
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-685m-2w69-288q
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-75px-5xx7-5xc7
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-c2c7-rcm5-vvqj
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-jvwf-75h9-cwgg
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-wcpc-wj8m-hjx6
Files: /repo/package-lock.json · reported by osv-scanner
2 GHSA-xq3m-2v4x-88gg
Files: /repo/package-lock.json · reported by osv-scanner
1 AAK-MCP-OPENCLAW-CVE-2026-62195-001
Files: package.json · reported by agent-audit-kit
1 AAK-SPLUNK-TOKLOG-001
Files: src/index.ts · reported by agent-audit-kit
1 GHSA-22p9-wv53-3rq4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-23hp-3jrh-7fpw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2hfg-4fh4-qp7f
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2hh7-c75g-qj2r
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2pr2-hcv6-7gwv
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2rqg-gjgv-84jm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2v37-7h3g-55p8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-2x4x-cc5g-qmmg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-39pp-xp36-q6mg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-3cw3-5vxw-g2h3
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-3g43-6gmg-66jw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-3qpv-xf3v-mm45
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-3vvq-q2qc-7rmp
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-3w6x-gv34-mqpf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-42mx-vp8m-j7qh
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-4c8g-83qw-93j6
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-4jpw-hj22-2xmc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-4qwc-c7g9-4xcw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-525j-hqq2-66r4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-536q-mj95-h29h
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-57gh-m6rq-54cf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-5wj5-87vq-39xm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-5xrq-8626-4rwp
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-62hf-57xw-28j9
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-63f5-hhc7-cx6p
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-63mg-xp9j-jfcm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-65h8-27jh-q8wv
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-66r7-m7xm-v49h
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-67mf-f936-ppxf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-6fvr-66p3-3qj4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-6g55-p6wh-862q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-6pfc-6m7w-m8fx
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-6v7q-wjvx-w8wg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-7437-7hg8-frrw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-777c-7fjr-54vf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-7g8c-cfr3-vqqr
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-7ggg-pvrf-458v
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-7jp6-r74r-995q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-7p8r-x3mc-p8w7
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-83w9-h5wv-j9xm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-88fw-hqm2-52qc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-8gc5-j5rx-235r
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-8rh7-6779-cjqq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-8x88-c5mf-7j5w
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-99qw-6mr3-36qr
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-9hjh-fr4f-gxc4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-9p3r-hh9g-5cmg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-9p93-7j67-5pc2
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-ccwh-wwpp-6wg5
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cg6c-q2hx-69h7
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cg7q-fg22-4g98
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-chqc-8p9q-pq6q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-chr9-m4q2-76hw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cmfr-9m2r-xwhq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cw4q-gqg5-g38h
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cwf8-44x6-32c2
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-cxmw-p77q-wchg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-f397-5vjw-v2c2
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-f7fh-qg34-x2xh
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-f88m-g3jw-g9cj
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-fq9j-vw4w-fr6v
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-fqw4-mph7-2vr8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-g2f6-pwvx-r275
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-g374-mggx-p6xc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-g5cg-8x5w-7jpm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-gfmx-pph7-g46x
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-gg9v-mgcp-v6m7
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-gjm7-hw8f-73rq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-h4jx-hjr3-fhgc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-h5hg-h7rr-gpf3
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hc5h-pmr3-3497
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hf68-49fm-59cq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hffm-xvc3-vprc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hfxv-24rg-xrqf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hr5v-j9h9-xjhg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-hw9r-h9mr-4jff
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-j3q9-mxjg-w52f
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-j472-gf56-x589
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-j7p2-qcwm-94v4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-jccr-rrw2-vc8h
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-jf56-mccx-5f3f
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-jfgx-wxx8-mp94
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-jvm4-4j77-39p6
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-m3mh-3mpg-37hw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-mgq6-vr84-7m2j
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-mhgq-xpfq-6r66
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-mw96-cpmx-2vgc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-mwp4-54f8-5fhr
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-p464-m8x6-vhv8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-p4x4-2r7f-wjxg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-p73f-w79w-jqr5
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-p92q-9vqr-4j8v
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-p9ff-h696-f583
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-pf86-5x62-jrwf
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q2gc-xjqw-qp89
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q3j6-qgpj-74h6
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q7q8-3mgw-q67r
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q8qp-cvcw-x6jj
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q99w-vh6v-q3v7
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-q9w8-cf67-r238
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qcj9-wwgw-6gm8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qjpc-qf9m-xwmr
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qm2m-28pf-hgjw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qm9x-v7cx-7rq4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qvv5-jq5g-4cgg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-qx8j-g322-qj6m
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-r39h-4c2p-3jxp
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-r6xh-pqhr-v4xh
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-r7vr-gr74-94p8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rf6f-7fwh-wjgh
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rj2p-j66c-mgqh
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rpmf-866q-6p89
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rqpp-rjj8-7wv8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rw39-5899-8mxp
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-rx78-29qr-5hq8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v245-v573-v5vm
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v2hh-gcrm-f6hx
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v2v2-f783-358j
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v2wj-q39q-566r
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v2ww-5rh7-2h5v
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v3qc-wrwx-j3pw
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v6r2-jh58-xx6w
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v8cx-933x-r976
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-v8wv-jg3q-qwpq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vfp4-8x56-j7c5
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vfw7-6rhc-6xxg
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vjx8-8p7h-82gr
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vmhq-cqm9-6p7q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vrm6-8vpv-qv8q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vxpw-j846-p89q
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-vxx3-6hc9-7cc3
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-w4v6-g3wm-w36c
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-w5ww-7chg-mxcq
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-w7jw-789q-3m8p
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-wc84-j36w-pw4x
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-wc8c-qw6v-h7f6
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-wcxr-59v9-rxr8
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-whf9-3hcx-gq54
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-wpc6-37g7-8q4w
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-wq58-2pvg-5h4f
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xf99-j42q-5w5p
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xh72-v6v9-mwhc
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xj9w-5r6q-x6v4
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xmxx-7p24-h892
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xr4f-mjxj-w6w5
Files: /repo/package-lock.json · reported by osv-scanner
1 GHSA-xw77-45gv-p728
Files: /repo/package-lock.json · reported by osv-scanner
350 The review budget for this scan was already spent before these findings were reached.
Rules: GHSA-f6pf-4gjx-c94r, GHSA-rp42-5vxx-qpwr, GHSA-qc36-x95h-7j53 and 332 more · Files: /repo/package-lock.json, /repo/src/linear-api.ts, CLAUDE.md and 9 more · reported by osv-scanner, nerlo-behavioral, agent-audit-kit and 1 more
Multiple critical vulnerabilities found in dependencies
The artifact contains multiple critical vulnerabilities within its dependencies, as identified by `osv-scanner`. These 25 distinct critical findings, primarily located in `package-lock.json`, could expose the system to severe risks. Potential impacts include remote code execution, denial of service, or unauthorized information access. These findings require immediate review and mitigation.
Concern level assessed by the review: Critical. This is the review's scale, not the registry badge.
Showing 25 of 25; the rest are in the per-scanner reports above.
Reviewed by gemini-2.5-flash. The model sees the findings, not your code, and cannot change a score.