← Back to search

@jsrepo/mcp

GitHub Actions Scanned 13d ago

An MCP server for jsrepo.

npm ↗
B
78.8 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

add_item_to_project
annotations: none low

Add a registry item or items to the users project.

schema object withDocs boolean withTests boolean withExamples boolean
view_registry_item
annotations: none low

View the code and information about a registry item.

query string offset number schema object
list_items_in_registry
annotations: none low

List items in a registry. You can optionally provide a query to filter the results.

query string offset number schema object

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 93

low
Tool 'add_item_to_project' has no annotations annotation_checker · 100%
low
Tool 'view_registry_item' has no annotations annotation_checker · 100%
low
Tool 'list_items_in_registry' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: next@16.1.1 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-5f7q-jpqc-wp7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-h27x-g6w4-24gq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-jcc7-9wpm-mj36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-mq59-m269-xvcx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.1 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-2crg-3p73-43xp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-3f6h-2hrp-w5wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-866w-xmhq-wj7x) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-hgv7-v322-mmgr) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-j62c-4x62-9r35) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.47.1 (GHSA-wqjv-9729-c5q2) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-crpf-4hrx-3jrp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-f7gr-6p89-r883) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-h7h7-mm68-gmrc) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-m56q-vw4c-c2cp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-phwv-c562-gvmh) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-pr6f-5x2q-rwfp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.41.0 (GHSA-rcqx-6q8c-2c42) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.1.10 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog: (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.7.0 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: bun@1.0.0 (GHSA-4j66-8f4r-3pjx) dependency_analyzer · 95%
medium
Vulnerable dependency: bun@1.0.0 (GHSA-v9mx-4pqq-h232) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: add_item_to_project manifest_parser · 75%
info
Tool: view_registry_item manifest_parser · 75%
info
Tool: list_items_in_registry manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 113 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%