@dreamworkhq/mcp
Advanced tools
@dreamworkhq/mcp - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 4 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
96290
114.87%- Dependency count
2
-60%- Lines of code
2197
361.55%- Number of lines in readme file
163
21.64%Worsened metrics
- Dev dependency count
5
66.67%- Number of package files
4
-63.64%- Number of medium supply chain risk alerts
2
100%Dependency changes
+ Added
@hono/node-server@1.19.17(transitive)+ Added
@modelcontextprotocol/sdk@1.29.0(transitive)+ Added
zod@4.4.2(transitive)- Removed
dotenv@^17.4.2- Removed
fastify@^5.8.5- Removed
pino-pretty@^13.1.3- Removed
@fastify/ajv-compiler@4.0.6(transitive)- Removed
@fastify/error@4.2.0(transitive)- Removed
@fastify/fast-json-stringify-compiler@5.1.0(transitive)- Removed
@fastify/forwarded@3.0.2(transitive)- Removed
@fastify/merge-json-schemas@0.2.1(transitive)- Removed
@fastify/proxy-addr@5.1.0(transitive)- Removed
@hono/node-server@2.1.1(transitive)- Removed
@modelcontextprotocol/sdk@1.30.0(transitive)- Removed
@pinojs/redact@0.4.0(transitive)- Removed
abstract-logging@2.0.1(transitive)- Removed
atomic-sleep@1.0.0(transitive)- Removed
avvio@9.3.0(transitive)- Removed
colorette@2.0.20(transitive)- Removed
cookie@1.1.1(transitive)- Removed
dateformat@4.6.3(transitive)- Removed
dequal@2.0.3(transitive)- Removed
dotenv@17.4.2(transitive)- Removed
end-of-stream@1.4.5(transitive)- Removed
fast-copy@4.1.1(transitive)- Removed
fast-decode-uri-component@1.0.1(transitive)- Removed
fast-json-stringify@7.0.1(transitive)- Removed
fast-querystring@1.1.2(transitive)- Removed
fast-safe-stringify@2.1.1(transitive)- Removed
fast-uri@4.1.4(transitive)- Removed
fastify@5.12.3(transitive)- Removed
fastq@1.20.3(transitive)- Removed
find-my-way@9.9.0(transitive)- Removed
help-me@5.0.0(transitive)- Removed
ipaddr.js@2.5.0(transitive)- Removed
joycon@3.1.1(transitive)- Removed
json-schema-ref-resolver@3.0.0(transitive)- Removed
light-my-request@6.6.0(transitive)- Removed
minimist@1.2.8(transitive)- Removed
on-exit-leak-free@2.1.2(transitive)- Removed
pino@10.3.1(transitive)- Removed
pino-abstract-transport@3.0.0(transitive)- Removed
pino-pretty@13.1.3(transitive)- Removed
pino-std-serializers@7.1.0(transitive)- Removed
process-warning@4.0.15.1.0(transitive)- Removed
pump@3.0.4(transitive)- Removed
quick-format-unescaped@4.0.4(transitive)- Removed
real-require@0.2.01.0.0(transitive)- Removed
ret@0.5.0(transitive)- Removed
reusify@1.1.0(transitive)- Removed
rfdc@1.4.1(transitive)- Removed
safe-regex2@5.1.1(transitive)- Removed
safe-stable-stringify@2.5.0(transitive)- Removed
secure-json-parse@4.1.0(transitive)- Removed
semver@7.8.5(transitive)- Removed
set-cookie-parser@2.7.2(transitive)- Removed
sonic-boom@4.2.1(transitive)- Removed
split2@4.2.0(transitive)- Removed
strip-json-comments@5.0.3(transitive)- Removed
thread-stream@4.2.0(transitive)- Removed
toad-cache@3.7.4(transitive)- Removed
zod@4.6.1(transitive)Updated
zod@4.4.2