@bolthub/mcp-bridge
Advanced tools
@bolthub/mcp-bridge - npm Package Compare versions
New alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
835845
0.12%- Dependency count
0
-100%- Lines of code
24629
0.16%- Number of low supply chain risk alerts
18
-5.26%Worsened metrics
- Dev dependency count
2
Infinity%Dependency changes
- Removed
@modelcontextprotocol/sdk@^1.12.0- Removed
zod@^3- Removed
@hono/node-server@2.1.6(transitive)- Removed
@modelcontextprotocol/sdk@1.32.2(transitive)- Removed
accepts@2.0.0(transitive)- Removed
ajv@8.20.0(transitive)- Removed
ajv-formats@3.0.1(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
body-parser@2.4.0(transitive)- Removed
bytes@3.1.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
content-disposition@2.0.1(transitive)- Removed
content-type@1.0.52.1.0(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cookie-signature@1.2.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
debug@4.4.3(transitive)- Removed
depd@2.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
ee-first@1.1.1(transitive)- Removed
encodeurl@2.0.1(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
escape-html@1.0.3(transitive)- Removed
etag@1.8.1(transitive)- Removed
eventsource@3.0.7(transitive)- Removed
eventsource-parser@3.1.1(transitive)- Removed
express@5.3.0(transitive)- Removed
express-rate-limit@8.7.3(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-uri@3.1.9(transitive)- Removed
finalhandler@2.1.1(transitive)- Removed
forwarded@0.2.0(transitive)- Removed
fresh@2.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
hono@4.13.16(transitive)- Removed
http-errors@2.0.1(transitive)- Removed
iconv-lite@0.7.3(transitive)- Removed
inherits@2.0.4(transitive)- Removed
ip-address@10.7.6(transitive)- Removed
ipaddr.js@1.9.1(transitive)- Removed
is-promise@4.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jose@6.2.15(transitive)- Removed
json-schema-traverse@1.0.0(transitive)- Removed
json-schema-typed@8.0.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
media-typer@1.1.1(transitive)- Removed
merge-descriptors@2.0.0(transitive)- Removed
mime-db@1.54.0(transitive)- Removed
mime-types@3.0.2(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@1.1.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
on-finished@2.4.2(transitive)- Removed
once@1.4.0(transitive)- Removed
parseurl@1.3.3(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-to-regexp@8.4.2(transitive)- Removed
pkce-challenge@5.0.1(transitive)- Removed
proxy-addr@2.0.8(transitive)- Removed
qs@6.17.1(transitive)- Removed
range-parser@1.3.0(transitive)- Removed
raw-body@3.0.2(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
router@2.2.0(transitive)- Removed
safer-buffer@2.1.2(transitive)- Removed
send@1.2.1(transitive)- Removed
serve-static@2.2.1(transitive)- Removed
setprototypeof@1.2.0(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
statuses@2.0.2(transitive)- Removed
toidentifier@1.0.1(transitive)- Removed
type-is@2.1.0(transitive)- Removed
unpipe@1.0.0(transitive)- Removed
vary@1.1.2(transitive)- Removed
which@2.0.2(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
zod@3.25.76(transitive)- Removed
zod-to-json-schema@3.25.2(transitive)