← Back to search

@creeperhost/modlens-mcp

GitHub Actions Scanned 22d ago

MCP server for browsing, decompiling, and analyzing Minecraft mod JARs

npm
? Not scanned yet

Versions

1.6.17latest
Jul 7, 2026
1.6.16
Jul 7, 2026
1.6.15
Jul 7, 2026
1.6.14
Jul 6, 2026
1.6.13
Jun 26, 2026
+ show 11 moreshow less
1.6.12
Jun 26, 2026
1.6.11
Jun 25, 2026
1.6.10
Jun 25, 2026
1.6.9
Jun 25, 2026
1.6.8
Jun 25, 2026
1.6.7
Jun 25, 2026
1.6.6
Jun 25, 2026
1.6.5
Jun 23, 2026
1.6.4
Jun 23, 2026
1.6.1
Jun 22, 2026
1.6.0
Jun 22, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
database medium
Server uses database capabilities via: better-sqlite3, pg
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 28

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-7q85-xj36-vmfc) dependency_analyzer · 95%
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-vwc7-r8mq-g2x9) dependency_analyzer · 95%
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-xcpc-8h2w-3j85) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.1 (GHSA-7w5x-hrqm-74c2) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in CreeperHost-modlens-mcp-56d0eac/src/mod-license.ts:366 entropy_analyzer · 75%
medium
Buffer.from base64 in CreeperHost-modlens-mcp-56d0eac/src/mod-license.ts:384 entropy_analyzer · 75%
medium
Buffer.from base64 in CreeperHost-modlens-mcp-56d0eac/src/registry-submission.test.ts:44 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in CreeperHost-modlens-mcp-56d0eac/src/license-source-references.ts:11 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in CreeperHost-modlens-mcp-56d0eac/scripts/test-mod-licenses-live.mjs:15 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in CreeperHost-modlens-mcp-56d0eac/scripts/test-mod-licenses-live.mjs:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in CreeperHost-modlens-mcp-56d0eac/scripts/test-mod-licenses-live.mjs:17 entropy_analyzer · 70%
medium
Buffer.from base64 in CreeperHost-modlens-mcp-56d0eac/src/tools/project.ts:272 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (57) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 259 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%