← Back to search

@youdotcom-oss/mcp

GitHub Actions Scanned 8d ago

You.com MCP STDIO bridge for the hosted You.com MCP server

npm ↗
? Not scanned yet

Versions

3.5.0latest
Jul 23, 2026
3.4.0
Jun 8, 2026
3.3.0
Apr 20, 2026
3.2.3
Apr 16, 2026
3.2.2
Mar 31, 2026
+ show 56 moreshow less
3.2.1
Mar 31, 2026
3.2.0-next.1
Mar 30, 2026
3.1.0
Mar 7, 2026
2.1.1
Mar 5, 2026
2.1.0
Mar 4, 2026
2.0.8
Feb 24, 2026
2.0.7
Feb 18, 2026
2.0.6
Feb 18, 2026
2.0.5
Feb 14, 2026
2.0.4
Feb 11, 2026
2.0.3
Feb 5, 2026
2.0.2
Feb 5, 2026
2.0.1
Feb 5, 2026
2.0.0
Feb 5, 2026
1.6.0
Feb 1, 2026
1.5.1
Jan 27, 2026
1.5.0
Jan 27, 2026
1.4.1
Jan 19, 2026
1.4.0
Jan 12, 2026
1.3.10
Dec 15, 2025
1.3.9-next.3
Dec 15, 2025
1.3.9-next.2
Dec 15, 2025
1.3.9-next.1
Dec 15, 2025
1.3.9
Dec 15, 2025
1.3.8
Dec 10, 2025
1.3.7
Dec 7, 2025
1.3.6
Dec 7, 2025
1.3.5
Dec 7, 2025
1.3.5-next.21
Dec 7, 2025
1.3.5-next.20
Dec 7, 2025
1.3.5-next.19
Dec 7, 2025
1.3.5-next.18
Dec 7, 2025
1.3.5-next.17
Dec 7, 2025
1.3.5-next.16
Dec 7, 2025
1.3.5-next.15
Dec 7, 2025
1.3.5-next.14
Dec 7, 2025
1.3.5-next.13
Dec 7, 2025
1.3.5-next.12
Dec 7, 2025
1.3.5-next.11
Dec 7, 2025
1.3.5-next.5
Dec 5, 2025
1.3.4
Dec 3, 2025
1.3.3
Nov 25, 2025
1.3.2
Nov 24, 2025
1.3.1
Nov 23, 2025
1.3.0
Nov 21, 2025
1.2.5
Nov 21, 2025
1.2.4
Nov 17, 2025
1.2.3
Nov 13, 2025
1.2.2
Nov 13, 2025
1.2.1
Nov 13, 2025
1.2.0
Nov 12, 2025
1.1.6
Oct 20, 2025
1.1.6-experimental-4
Oct 20, 2025
1.1.6-experimental-3
Oct 20, 2025
1.1.5
Oct 8, 2025
1.1.4
Sep 25, 2025

Tools 0

No tools indexed yet.

Permissions 2

shell high
Server uses shell capabilities via: spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 12

medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Hex string literal (>50 chars) in youdotcom-oss-dx-toolkit-8df1232/packages/cli/src/tools.ts:3 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in youdotcom-oss-dx-toolkit-8df1232/packages/cli/src/tests/cli.spec.ts:90 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in youdotcom-oss-dx-toolkit-8df1232/packages/api/src/tool-schemas.ts:2 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 20 components sbom_generator · 100%