@codai/axiom-mcp
Advanced tools
@codai/axiom-mcp - npm Package Compare versions
New alerts
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
4758471
53.37%- Number of package files
23
27.78%- Lines of code
140237
51.74%- Number of lines in readme file
208
18.18%Worsened metrics
- Dependency count
10
11.11%- Dev dependency count
6
50%- Number of low supply chain risk alerts
35
52.17%- Number of medium supply chain risk alerts
22
57.14%Dependency changes
+ Added
@cedar-policy/cedar-wasm@4.13.0(transitive)+ Added
@codai/axiom-apply@2.2.0(transitive)+ Added
@codai/axiom-axm@2.2.0(transitive)+ Added
@codai/axiom-canon@2.2.0(transitive)+ Added
@codai/axiom-checks@2.2.0(transitive)+ Added
@codai/axiom-emitters-web@2.2.0(transitive)+ Added
@codai/axiom-plan@2.2.0(transitive)+ Added
@codai/axiom-schema@2.2.0(transitive)+ Added
@modelcontextprotocol/core@2.0.0(transitive)+ Added
@modelcontextprotocol/server@2.0.0(transitive)- Removed
@modelcontextprotocol/sdk@1.30.0- Removed
@codai/axiom-apply@2.1.0(transitive)- Removed
@codai/axiom-axm@2.1.0(transitive)- Removed
@codai/axiom-canon@2.1.0(transitive)- Removed
@codai/axiom-checks@2.1.0(transitive)- Removed
@codai/axiom-emitters-web@2.1.0(transitive)- Removed
@codai/axiom-plan@2.1.0(transitive)- Removed
@codai/axiom-schema@2.1.0(transitive)- Removed
@hono/node-server@2.1.3(transitive)- Removed
@modelcontextprotocol/sdk@1.30.0(transitive)- Removed
accepts@2.0.0(transitive)- Removed
ajv@8.20.0(transitive)- Removed
ajv-formats@3.0.1(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
body-parser@2.3.0(transitive)- Removed
bytes@3.1.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
content-disposition@1.1.0(transitive)- Removed
content-type@1.0.52.1.0(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cookie-signature@1.2.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
debug@4.4.3(transitive)- Removed
depd@2.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
ee-first@1.1.1(transitive)- Removed
encodeurl@2.0.0(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
escape-html@1.0.3(transitive)- Removed
etag@1.8.1(transitive)- Removed
eventsource@3.0.7(transitive)- Removed
eventsource-parser@3.1.1(transitive)- Removed
express@5.2.1(transitive)- Removed
express-rate-limit@8.7.0(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-uri@3.1.8(transitive)- Removed
finalhandler@2.1.1(transitive)- Removed
forwarded@0.2.0(transitive)- Removed
fresh@2.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
hono@4.13.12(transitive)- Removed
http-errors@2.0.1(transitive)- Removed
iconv-lite@0.7.3(transitive)- Removed
inherits@2.0.4(transitive)- Removed
ip-address@10.7.3(transitive)- Removed
ipaddr.js@1.9.1(transitive)- Removed
is-promise@4.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jose@6.2.12(transitive)- Removed
json-schema-traverse@1.0.0(transitive)- Removed
json-schema-typed@8.0.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
media-typer@1.1.1(transitive)- Removed
merge-descriptors@2.0.0(transitive)- Removed
mime-db@1.54.0(transitive)- Removed
mime-types@3.0.2(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@1.1.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
on-finished@2.4.1(transitive)- Removed
once@1.4.0(transitive)- Removed
parseurl@1.3.3(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-to-regexp@8.4.2(transitive)- Removed
pkce-challenge@5.0.1(transitive)- Removed
proxy-addr@2.0.8(transitive)- Removed
qs@6.16.0(transitive)- Removed
range-parser@1.3.0(transitive)- Removed
raw-body@3.0.2(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
router@2.2.0(transitive)- Removed
safer-buffer@2.1.2(transitive)- Removed
send@1.2.1(transitive)- Removed
serve-static@2.2.1(transitive)- Removed
setprototypeof@1.2.0(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
statuses@2.0.2(transitive)- Removed
toidentifier@1.0.1(transitive)- Removed
type-is@2.1.0(transitive)- Removed
unpipe@1.0.0(transitive)- Removed
vary@1.1.2(transitive)- Removed
which@2.0.2(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
zod-to-json-schema@3.25.2(transitive)Updated
@codai/axiom-apply@2.2.0Updated
@codai/axiom-axm@2.2.0Updated
@codai/axiom-canon@2.2.0Updated
@codai/axiom-checks@2.2.0Updated
@codai/axiom-plan@2.2.0Updated
@codai/axiom-schema@2.2.0