toolhive-registry-server

The server demonstrates a strong focus on security, with OAuth/OIDC authentication enabled by default and extensive documentation on secure configuration (e.g., `sslMode: verify-full`, `pgpass` files for database credentials, two-user database security model). It also has a clear `SECURITY.md` policy for vulnerability reporting. While `docker/postgres-init.sh` contains hardcoded passwords for `app_password` and `migration_password`, this is within an initialization script for initial setup and explicitly advises using a `pgpass` file for password management, which mitigates the risk for production environments. The project uses `sqlc` for database interaction, which helps prevent SQL injection vulnerabilities.