codex-plugin-doctor 1.32.0 → 1.34.0

package/README.md

@@ -234,10 +234,12 @@ codex-plugin-doctor audit --installed
 codex-plugin-doctor audit --installed --security --compat
 codex-plugin-doctor audit --installed --security --compat --json --output local-audit.json
 codex-plugin-doctor audit --installed --security --compat --cache
-codex-plugin-doctor audit --installed --changed --cache
-codex-plugin-doctor audit deps .
-codex-plugin-doctor audit deps . --json --output dependency-audit.json
-codex-plugin-doctor watch .
+codex-plugin-doctor audit --installed --changed --cache
+codex-plugin-doctor audit deps .
+codex-plugin-doctor audit deps . --json --output dependency-audit.json
+codex-plugin-doctor audit deps . --recommend
+codex-plugin-doctor audit deps . --recommend --json --output dependency-remediation.json
+codex-plugin-doctor watch .
 codex-plugin-doctor watch . --json --output watch-latest.json --debounce-ms 500
 codex-plugin-doctor init-git-hooks .
 codex-plugin-doctor init-git-hooks . --json
@@ -302,7 +304,7 @@ codex-plugin-doctor check . --json --runtime --verbose-runtime
 
 `audit --installed` runs a local ecosystem audit against every discovered Codex plugin in the installed plugin cache. Add `--security` to include security scorecards, `--compat` to include the all-client compatibility matrix, and `--json --output local-audit.json` when you want a shareable machine-readable report. Add `--cache` to reuse unchanged plugin results between runs; add `--changed` to only report plugins whose fingerprint changed since the last cached audit. Use `--cache-file path/to/audit-cache.json` when CI or scripted runs need an explicit cache location.
 
-`audit deps <path>` runs `npm audit --json` for the target package and normalizes dependency vulnerability results into a stable `schemaVersion: "1.0.0"` report. Use `--json --output dependency-audit.json` when CI needs machine-readable status, vulnerability counts, and the raw npm audit payload.
+`audit deps <path>` runs `npm audit --json` for the target package and normalizes dependency vulnerability results into a stable `schemaVersion: "1.0.0"` report. Use `--json --output dependency-audit.json` when CI needs machine-readable status, vulnerability counts, and the raw npm audit payload. Add `--recommend` to include prioritized remediation actions for direct upgrades, direct no-fix packages, transitive parent updates, and manual transitive review.
 
 `watch <path>` continuously validates a plugin package after file changes. Use `--debounce-ms <ms>` to tune noisy repositories, `--runtime` when runtime probes are required, and `--json --output watch-latest.json` when another process should consume the latest validation snapshot.
 
@@ -400,9 +402,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: Esquetta/CodexPluginDoctor@v1.32.0
+      - uses: Esquetta/CodexPluginDoctor@v1.34.0
         with:
-          version: "1.32.0"
+          version: "1.34.0"
           path: .
           runtime: "true"
           policy: codex-publish

package/dist/core/dep-audit.d.ts

@@ -12,6 +12,19 @@ export interface DepAuditReport {
     totalVulnerabilities: number;
     auditJson: unknown;
 }
+export interface DepAuditRecommendation {
+    packageName: string;
+    priority: "critical" | "high" | "moderate" | "low";
+    action: "upgrade_direct" | "replace_direct" | "update_parent" | "review_transitive";
+    summary: string;
+    breakingChangeRisk: "low" | "medium" | "high" | "unknown";
+}
+export declare function buildDepAuditRecommendations(vulnerabilities: DepAuditVulnerability[]): DepAuditRecommendation[];
 export declare function buildDepAudit(targetPath: string): Promise<DepAuditReport>;
-export declare function renderDepAudit(report: DepAuditReport): string;
-export declare function renderDepAuditJson(report: DepAuditReport): string;
+export declare function renderDepAudit(report: DepAuditReport, options?: {
+    recommendations?: boolean;
+}): string;
+export declare function renderDepAuditJson(report: DepAuditReport, options?: {
+    recommendations?: boolean;
+}): string;
+export declare function renderDepAuditSarif(report: DepAuditReport): string;

package/dist/core/dep-audit.js

@@ -82,6 +82,66 @@ function computeStatus(vulnerabilities) {
     }
     return "warn";
 }
+function severityRank(severity) {
+    return severity === "critical" ? 0 :
+        severity === "high" ? 1 :
+            severity === "moderate" ? 2 : 3;
+}
+function remediationRank(vulnerability) {
+    if (vulnerability.isDirect && vulnerability.fixAvailable) {
+        return 0;
+    }
+    if (vulnerability.isDirect) {
+        return 1;
+    }
+    return vulnerability.fixAvailable ? 2 : 3;
+}
+export function buildDepAuditRecommendations(vulnerabilities) {
+    return [...vulnerabilities]
+        .sort((left, right) => {
+        const remediationDelta = remediationRank(left) - remediationRank(right);
+        if (remediationDelta !== 0) {
+            return remediationDelta;
+        }
+        return severityRank(left.severity) - severityRank(right.severity);
+    })
+        .map((vuln) => {
+        if (vuln.isDirect && vuln.fixAvailable) {
+            return {
+                packageName: vuln.name,
+                priority: vuln.severity,
+                action: "upgrade_direct",
+                summary: `Upgrade direct dependency \`${vuln.name}\` with \`npm update ${vuln.name}\` or an explicit package upgrade.`,
+                breakingChangeRisk: vuln.severity === "critical" ? "high" : "medium"
+            };
+        }
+        if (vuln.isDirect) {
+            return {
+                packageName: vuln.name,
+                priority: vuln.severity,
+                action: "replace_direct",
+                summary: `Replace or pin direct dependency \`${vuln.name}\`; npm did not report an automatic fix.`,
+                breakingChangeRisk: "high"
+            };
+        }
+        if (vuln.fixAvailable) {
+            return {
+                packageName: vuln.name,
+                priority: vuln.severity,
+                action: "update_parent",
+                summary: `Update the parent dependency for transitive package \`${vuln.name}\`.`,
+                breakingChangeRisk: "medium"
+            };
+        }
+        return {
+            packageName: vuln.name,
+            priority: vuln.severity,
+            action: "review_transitive",
+            summary: `Review transitive package \`${vuln.name}\`; npm did not report an automatic fix.`,
+            breakingChangeRisk: "unknown"
+        };
+    });
+}
 export async function buildDepAudit(targetPath) {
     const resolvedPath = path.resolve(targetPath);
     const packageJsonPath = resolvePackageJson(resolvedPath);
@@ -140,7 +200,7 @@ export async function buildDepAudit(targetPath) {
         auditJson
     };
 }
-export function renderDepAudit(report) {
+export function renderDepAudit(report, options = {}) {
     const lines = [
         "Dependency Vulnerability Audit",
         "=============================",
@@ -159,15 +219,65 @@ export function renderDepAudit(report) {
                 vuln.severity === "moderate" ? "MODERATE" : "LOW";
         lines.push(`${tag.padEnd(10)} ${vuln.name}`, `          Direct: ${vuln.isDirect ? "yes" : "no"}`, `          Fix available: ${vuln.fixAvailable ? "yes" : "no"}`, vuln.via.length > 0 ? `          Via: ${vuln.via.join(", ")}` : "", "");
     }
+    if (options.recommendations) {
+        const recommendations = buildDepAuditRecommendations(report.vulnerabilities);
+        lines.push("Next actions", "------------");
+        if (recommendations.length === 0) {
+            lines.push("No remediation actions needed.");
+        }
+        for (const [index, recommendation] of recommendations.entries()) {
+            lines.push(`${index + 1}. ${recommendation.summary}`);
+        }
+    }
     return lines.join("\n");
 }
-export function renderDepAuditJson(report) {
+export function renderDepAuditJson(report, options = {}) {
     return JSON.stringify({
         schemaVersion: "1.0.0",
         targetPath: report.targetPath,
         status: report.status,
         totalVulnerabilities: report.totalVulnerabilities,
         vulnerabilities: report.vulnerabilities,
+        ...(options.recommendations
+            ? { recommendations: buildDepAuditRecommendations(report.vulnerabilities) }
+            : {}),
         audit: report.auditJson
     }, null, 2);
 }
+export function renderDepAuditSarif(report) {
+    const rules = report.vulnerabilities.map((vuln) => ({
+        id: `dep-audit.${vuln.name}`,
+        name: vuln.name,
+        shortDescription: {
+            text: `${vuln.severity} severity vulnerability in ${vuln.name}${vuln.fixAvailable ? " (fix available)" : ""}`
+        },
+        help: {
+            text: vuln.via.length > 0 ? `Via: ${vuln.via.join(", ")}` : "No additional information."
+        }
+    }));
+    const results = report.vulnerabilities.map((vuln, index) => ({
+        ruleId: `dep-audit.${vuln.name}`,
+        ruleIndex: index,
+        level: vuln.severity === "critical" || vuln.severity === "high" ? "error" : "warning",
+        message: {
+            text: `${vuln.severity}: ${vuln.name} ${vuln.fixAvailable ? "(fix available)" : "(no fix available)"}`
+        }
+    }));
+    const sarif = {
+        version: "2.1.0",
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "codex-plugin-doctor (dep-audit)",
+                        informationUri: "https://github.com/Esquetta/CodexPluginDoctor",
+                        rules
+                    }
+                },
+                results
+            }
+        ]
+    };
+    return JSON.stringify(sarif, null, 2);
+}

package/dist/index.d.ts

@@ -22,9 +22,9 @@ export { buildDoctorNpmPackageReport, renderDoctorNpmPackageReport, renderDoctor
 export { buildDoctorRiskDiffReport, renderDoctorRiskDiffReport, renderDoctorRiskDiffReportJson, type BuildDoctorRiskDiffReportOptions, type DoctorRiskDiffReport, type RiskDiffFinding, type RiskFindingCategory } from "./core/risk-diff.js";
 export { buildDoctorInspectorReport, renderDoctorInspectorReport, renderDoctorInspectorReportJson, type BuildDoctorInspectorReportOptions, type DoctorInspectorReport } from "./core/inspector-bridge.js";
 export { buildEcosystemAudit, renderEcosystemAudit, renderEcosystemAuditJson, type EcosystemAuditReport } from "./audit/ecosystem-audit.js";
-export { applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames, type PolicyPackName } from "./policy/policy-packs.js";
+export { applyPolicyToDepAudit, applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames, type PolicyPackName } from "./policy/policy-packs.js";
 export { buildGenericMcpDoctor, renderGenericMcpDoctor, renderGenericMcpDoctorJson, type GenericMcpDoctorReport } from "./mcp/generic-mcp-doctor.js";
 export { watchPlugin, type WatchPluginOptions, type WatchPluginResult } from "./core/watch-plugin.js";
-export { buildDepAudit, renderDepAudit, renderDepAuditJson, type DepAuditReport, type DepAuditVulnerability } from "./core/dep-audit.js";
+export { buildDepAudit, buildDepAuditRecommendations, renderDepAudit, renderDepAuditJson, renderDepAuditSarif, type DepAuditRecommendation, type DepAuditReport, type DepAuditVulnerability } from "./core/dep-audit.js";
 export { initGitHooks, removeGitHooks, type InitGitHooksResult, type RemoveGitHooksResult } from "./core/init-git-hooks.js";
 export declare function runCheck(targetPath: string, options?: CheckOptions): Promise<CheckResult>;

package/dist/index.js

@@ -22,10 +22,10 @@ export { buildDoctorNpmPackageReport, renderDoctorNpmPackageReport, renderDoctor
 export { buildDoctorRiskDiffReport, renderDoctorRiskDiffReport, renderDoctorRiskDiffReportJson } from "./core/risk-diff.js";
 export { buildDoctorInspectorReport, renderDoctorInspectorReport, renderDoctorInspectorReportJson } from "./core/inspector-bridge.js";
 export { buildEcosystemAudit, renderEcosystemAudit, renderEcosystemAuditJson } from "./audit/ecosystem-audit.js";
-export { applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames } from "./policy/policy-packs.js";
+export { applyPolicyToDepAudit, applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames } from "./policy/policy-packs.js";
 export { buildGenericMcpDoctor, renderGenericMcpDoctor, renderGenericMcpDoctorJson } from "./mcp/generic-mcp-doctor.js";
 export { watchPlugin } from "./core/watch-plugin.js";
-export { buildDepAudit, renderDepAudit, renderDepAuditJson } from "./core/dep-audit.js";
+export { buildDepAudit, buildDepAuditRecommendations, renderDepAudit, renderDepAuditJson, renderDepAuditSarif } from "./core/dep-audit.js";
 export { initGitHooks, removeGitHooks } from "./core/init-git-hooks.js";
 export async function runCheck(targetPath, options = {}) {
     return validatePlugin(targetPath, options);

package/dist/policy/policy-packs.d.ts

@@ -1,4 +1,5 @@
 import type { DoctorConfig } from "../core/doctor-config.js";
+import type { DepAuditReport } from "../core/dep-audit.js";
 import type { SecurityAudit } from "../security/security-audit.js";
 export declare const policyPackNames: readonly ["codex-publish", "mcp-strict", "security"];
 export type PolicyPackName = (typeof policyPackNames)[number];
@@ -7,3 +8,4 @@ export declare function policyEnablesRuntime(policy: PolicyPackName | null): boo
 export declare function policyFailsOnWarnings(policy: PolicyPackName | null): boolean;
 export declare function applyPolicyToDoctorConfig(config: DoctorConfig, policy: PolicyPackName | null): DoctorConfig;
 export declare function applyPolicyToSecurityAudit(audit: SecurityAudit, policy: PolicyPackName | null): SecurityAudit;
+export declare function applyPolicyToDepAudit(report: DepAuditReport, policy: PolicyPackName | null): DepAuditReport;

package/dist/policy/policy-packs.js

@@ -31,3 +31,12 @@ export function applyPolicyToSecurityAudit(audit, policy) {
         status: "fail"
     };
 }
+export function applyPolicyToDepAudit(report, policy) {
+    if (!policyFailsOnWarnings(policy)) {
+        return report;
+    }
+    if (report.status === "warn") {
+        return { ...report, status: "fail" };
+    }
+    return report;
+}

package/dist/rules/rule-catalog.js

@@ -251,6 +251,15 @@ export const ruleCatalog = [
         fix: "Use HTTPS for remote MCP servers; reserve HTTP for explicit localhost development endpoints.",
         example: '{ "url": "https://example.com/mcp" }'
     },
+    {
+        id: "plugin.security.mcp_binds_all_interfaces",
+        category: "security",
+        defaultSeverity: "warn",
+        summary: "An MCP server listens on `0.0.0.0` instead of `localhost`.",
+        why: "Servers that bind to all interfaces can accept connections from external hosts, which is rarely intended for local MCP development.",
+        fix: "Use `127.0.0.1` or `localhost` in server URLs and transport configuration unless external access is explicitly required.",
+        example: '{ "url": "http://127.0.0.1:3000/mcp" }'
+    },
     {
         id: "plugin.security.prompt_injection_text",
         category: "security",

package/dist/run-cli.js

@@ -31,7 +31,7 @@ import { applyFixPlan, buildFixPlan, renderApplyFixResult, renderFixPlanJsonRepo
 import { renderClientDoctor, renderEnvironmentDoctor, renderEnvironmentDoctorJson } from "./core/environment-doctor.js";
 import { initCiWorkflow } from "./core/init-ci.js";
 import { watchPlugin } from "./core/watch-plugin.js";
-import { buildDepAudit, renderDepAudit, renderDepAuditJson } from "./core/dep-audit.js";
+import { buildDepAudit, renderDepAudit, renderDepAuditJson, renderDepAuditSarif } from "./core/dep-audit.js";
 import { initGitHooks, removeGitHooks } from "./core/init-git-hooks.js";
 import { initPluginPackage, initPluginTemplates, isInitPluginTemplate } from "./core/init-plugin.js";
 import { runCheck } from "./index.js";
@@ -48,7 +48,7 @@ import { renderSuppressionList, renderSuppressionListJson, renderSuppressionMuta
 import { renderRuleExplanation } from "./reporting/render-rule-explanation.js";
 import { renderSarifReport } from "./reporting/render-sarif-report.js";
 import { renderTextReport } from "./reporting/render-text-report.js";
-import { applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames } from "./policy/policy-packs.js";
+import { applyPolicyToDepAudit, applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames } from "./policy/policy-packs.js";
 import { findRuleDefinition } from "./rules/rule-catalog.js";
 import { buildSecurityAudit, renderSecurityAuditJson, renderSecurityScorecard } from "./security/security-audit.js";
 import { buildTrustScore, renderTrustScore, renderTrustScoreJson } from "./security/trust-score.js";
@@ -78,7 +78,7 @@ const defaultIo = {
     }
 };
 function printUsage(io) {
-    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--json] [--output <path>]\n       codex-plugin-doctor mcp <path> [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor suppress add <path> [--fingerprint <sha256> --reason <text> --expires-at YYYY-MM-DD] [--config <path>] [--json]\n       codex-plugin-doctor suppress list <path> [--config <path>] [--json]\n       codex-plugin-doctor suppress remove <path> [--fingerprint <sha256>|--index <n>] [--config <path>] [--json]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor watch <path> [--runtime] [--json] [--output <path>] [--debounce-ms <ms>] [--max-iterations <n>] [--fail-fast] [--accumulate-json <path>]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus|runtime-plan <path> [--json|--markdown] [--output <path>]|runtime-policy <path> [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>] [--failures-only]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--upload]|mcp <path>|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor init-git-hooks [path] [--force] [--json]\n       codex-plugin-doctor init-git-hooks [path] --remove [--json]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
+    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--policy codex-publish|mcp-strict|security] [--recommend] [--json|--sarif] [--output <path>]\n       codex-plugin-doctor mcp <path> [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor suppress add <path> [--fingerprint <sha256> --reason <text> --expires-at YYYY-MM-DD] [--config <path>] [--json]\n       codex-plugin-doctor suppress list <path> [--config <path>] [--json]\n       codex-plugin-doctor suppress remove <path> [--fingerprint <sha256>|--index <n>] [--config <path>] [--json]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor watch <path> [--runtime] [--json] [--output <path>] [--debounce-ms <ms>] [--max-iterations <n>] [--fail-fast] [--accumulate-json <path>]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus|runtime-plan <path> [--json|--markdown] [--output <path>]|runtime-policy <path> [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>] [--failures-only]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--upload]|mcp <path>|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor init-git-hooks [path] [--force] [--json]\n       codex-plugin-doctor init-git-hooks [path] --remove [--json]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
     io.writeStderr("Suppression governance: codex-plugin-doctor suppress list <path> [--fail-on-expired] [--fail-on-invalid] [--warn-expiring-within-days <days>]\n       codex-plugin-doctor suppress prune <path> [--apply] [--json]");
 }
 const suppressUsageText = [
@@ -1963,16 +1963,38 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 ? remainingArgs
                 : remainingArgs.slice(1);
             const jsonOutput = depsFlags.includes("--json");
+            const sarifOutput = depsFlags.includes("--sarif");
+            const recommendationsOutput = depsFlags.includes("--recommend");
             const outputIndex = depsFlags.indexOf("--output");
             const outputPath = outputIndex === -1 ? null : depsFlags[outputIndex + 1];
+            const policyIndex = depsFlags.indexOf("--policy");
+            const policyName = policyIndex === -1 ? null : depsFlags[policyIndex + 1];
+            const policy = parsePolicyPack(policyName);
             if (outputIndex !== -1 && (!outputPath || outputPath.startsWith("--"))) {
                 io.writeStderr("Missing path after --output.");
                 return 2;
             }
-            const report = await buildDepAudit(targetPath);
-            const renderedReport = jsonOutput
-                ? renderDepAuditJson(report)
-                : renderDepAudit(report);
+            if (policyIndex !== -1 && (!policyName || policyName.startsWith("--"))) {
+                io.writeStderr("Missing policy after --policy.");
+                return 2;
+            }
+            if (policyIndex !== -1 && !policy) {
+                io.writeStderr(`Unknown policy: ${policyName}. Supported policies: ${policyPackNames.join(", ")}.`);
+                return 2;
+            }
+            if (jsonOutput && sarifOutput) {
+                io.writeStderr("Use either --json or --sarif, not both.");
+                return 2;
+            }
+            let report = await buildDepAudit(targetPath);
+            if (policy) {
+                report = applyPolicyToDepAudit(report, policy);
+            }
+            const renderedReport = sarifOutput
+                ? renderDepAuditSarif(report)
+                : jsonOutput
+                    ? renderDepAuditJson(report, { recommendations: recommendationsOutput })
+                    : renderDepAudit(report, { recommendations: recommendationsOutput });
             if (outputPath) {
                 await writeFile(outputPath, renderedReport, "utf8");
             }
@@ -1982,7 +2004,7 @@ export async function runCli(args, io = defaultIo, options = {}) {
         const auditFlags = maybePath ? [maybePath, ...remainingArgs] : remainingArgs;
         const installed = auditFlags.includes("--installed");
         if (!installed) {
-            io.writeStderr("Usage: codex-plugin-doctor audit --installed [filter] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--json] [--output <path>]");
+            io.writeStderr("Usage: codex-plugin-doctor audit --installed [filter] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--policy codex-publish|mcp-strict|security] [--json|--sarif] [--output <path>]");
             return 2;
         }
         const installedIndex = auditFlags.indexOf("--installed");

package/dist/security/security-audit.js

@@ -227,6 +227,9 @@ export function auditMcpServerConfig(rootPath, parsedConfig, options = {}) {
         if (typeof url === "string" && /^http:\/\//i.test(url)) {
             findings.push(buildFinding("warn", "plugin.security.insecure_http_url", `The MCP server \`${serverName}\` uses an insecure HTTP URL.`, "Plain HTTP transports can expose MCP traffic on non-local networks and make endpoint identity harder to verify.", "Use HTTPS for remote MCP servers; reserve HTTP for explicit localhost development endpoints.", { serverName, configPath, url }));
         }
+        if (typeof url === "string" && /\/\/0\.0\.0\.0[:/]/i.test(url)) {
+            findings.push(buildFinding("warn", "plugin.security.mcp_binds_all_interfaces", `The MCP server \`${serverName}\` URL binds to \`0.0.0.0\`.`, "Servers that listen on all interfaces can accept connections from external hosts, which is rarely intended for local MCP development.", "Use `127.0.0.1` or `localhost` instead of `0.0.0.0` unless external access is explicitly required.", { serverName, configPath, url }));
+        }
     }
     return findings;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.32.0",
+  "version": "1.34.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",