@honkio/mcp
Advanced tools
@honkio/mcp - npm Package Compare versions
New alerts
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Network access
Supply chain riskThis module accesses the network.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
198584
62.26%- Number of package files
47
104.35%- Lines of code
1984
58.34%- Number of low quality alerts
0
-100%- Number of lines in readme file
437
24.86%Worsened metrics
- Dependency count
3
50%- Dev dependency count
5
66.67%- Number of low supply chain risk alerts
15
200%- Number of medium supply chain risk alerts
3
200%Dependency changes
+ Added
@hono/node-server@1.19.17(transitive)+ Added
@modelcontextprotocol/core@2.1.0(transitive)+ Added
@modelcontextprotocol/node@2.1.0(transitive)+ Added
@modelcontextprotocol/server@2.1.0(transitive)+ Added
zod@4.6.5(transitive)- Removed
@modelcontextprotocol/sdk@^1.28.0- Removed
@hono/node-server@2.1.1(transitive)- Removed
@modelcontextprotocol/sdk@1.30.1(transitive)- Removed
accepts@2.0.0(transitive)- Removed
ajv@8.20.0(transitive)- Removed
ajv-formats@3.0.1(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
body-parser@2.3.0(transitive)- Removed
bytes@3.1.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
content-disposition@1.1.0(transitive)- Removed
content-type@1.0.52.1.0(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cookie-signature@1.2.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
debug@4.4.3(transitive)- Removed
depd@2.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
ee-first@1.1.1(transitive)- Removed
encodeurl@2.0.0(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
escape-html@1.0.3(transitive)- Removed
etag@1.8.1(transitive)- Removed
eventsource@3.0.7(transitive)- Removed
eventsource-parser@3.1.1(transitive)- Removed
express@5.2.1(transitive)- Removed
express-rate-limit@8.7.0(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-uri@3.1.8(transitive)- Removed
finalhandler@2.1.1(transitive)- Removed
forwarded@0.2.0(transitive)- Removed
fresh@2.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
http-errors@2.0.1(transitive)- Removed
iconv-lite@0.7.3(transitive)- Removed
inherits@2.0.4(transitive)- Removed
ip-address@10.7.2(transitive)- Removed
ipaddr.js@1.9.1(transitive)- Removed
is-promise@4.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jose@6.2.12(transitive)- Removed
json-schema-traverse@1.0.0(transitive)- Removed
json-schema-typed@8.0.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
media-typer@1.1.1(transitive)- Removed
merge-descriptors@2.0.0(transitive)- Removed
mime-db@1.54.0(transitive)- Removed
mime-types@3.0.2(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@1.1.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
on-finished@2.4.1(transitive)- Removed
once@1.4.0(transitive)- Removed
parseurl@1.3.3(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-to-regexp@8.4.2(transitive)- Removed
pkce-challenge@5.0.1(transitive)- Removed
proxy-addr@2.0.8(transitive)- Removed
qs@6.16.0(transitive)- Removed
range-parser@1.3.0(transitive)- Removed
raw-body@3.0.2(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
router@2.2.0(transitive)- Removed
safer-buffer@2.1.2(transitive)- Removed
send@1.2.1(transitive)- Removed
serve-static@2.2.1(transitive)- Removed
setprototypeof@1.2.0(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
statuses@2.0.2(transitive)- Removed
toidentifier@1.0.1(transitive)- Removed
type-is@2.1.0(transitive)- Removed
unpipe@1.0.0(transitive)- Removed
vary@1.1.2(transitive)- Removed
which@2.0.2(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
zod@3.25.76(transitive)- Removed
zod-to-json-schema@3.25.2(transitive)Updated
zod@^4.3.6