@masonator/coolify-mcp
Advanced tools
@masonator/coolify-mcp - npm Package Compare versions
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 4 instances
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
1016828
15.91%- Number of package files
59
31.11%- Lines of code
20177
17.03%- Number of lines in readme file
193
6.04%Worsened metrics
- Dependency count
4
33.33%- Dev dependency count
20
5.26%- Number of low supply chain risk alerts
34
61.9%- Number of medium supply chain risk alerts
70
677.78%Dependency changes
+ Added
@modelcontextprotocol/core@2.0.0(transitive)+ Added
@modelcontextprotocol/server@2.0.0(transitive)- Removed
@modelcontextprotocol/sdk@^1.23.0- Removed
@hono/node-server@2.1.1(transitive)- Removed
@modelcontextprotocol/sdk@1.30.0(transitive)- Removed
accepts@2.0.0(transitive)- Removed
ajv@8.20.0(transitive)- Removed
ajv-formats@3.0.1(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
body-parser@2.3.0(transitive)- Removed
bytes@3.1.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
content-disposition@1.1.0(transitive)- Removed
content-type@1.0.52.1.0(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cookie-signature@1.2.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
debug@4.4.3(transitive)- Removed
depd@2.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
ee-first@1.1.1(transitive)- Removed
encodeurl@2.0.0(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
escape-html@1.0.3(transitive)- Removed
etag@1.8.1(transitive)- Removed
eventsource@3.0.7(transitive)- Removed
eventsource-parser@3.1.1(transitive)- Removed
express@5.2.1(transitive)- Removed
express-rate-limit@8.7.0(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-uri@3.1.7(transitive)- Removed
finalhandler@2.1.1(transitive)- Removed
forwarded@0.2.0(transitive)- Removed
fresh@2.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
hono@4.13.7(transitive)- Removed
http-errors@2.0.1(transitive)- Removed
iconv-lite@0.7.3(transitive)- Removed
inherits@2.0.4(transitive)- Removed
ip-address@10.7.0(transitive)- Removed
ipaddr.js@1.9.1(transitive)- Removed
is-promise@4.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jose@6.2.12(transitive)- Removed
json-schema-traverse@1.0.0(transitive)- Removed
json-schema-typed@8.0.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
media-typer@1.1.1(transitive)- Removed
merge-descriptors@2.0.0(transitive)- Removed
mime-db@1.54.0(transitive)- Removed
mime-types@3.0.2(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@1.1.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
on-finished@2.4.1(transitive)- Removed
once@1.4.0(transitive)- Removed
parseurl@1.3.3(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-to-regexp@8.4.2(transitive)- Removed
pkce-challenge@5.0.1(transitive)- Removed
proxy-addr@2.0.7(transitive)- Removed
qs@6.16.0(transitive)- Removed
range-parser@1.3.0(transitive)- Removed
raw-body@3.0.2(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
router@2.2.0(transitive)- Removed
safer-buffer@2.1.2(transitive)- Removed
send@1.2.1(transitive)- Removed
serve-static@2.2.1(transitive)- Removed
setprototypeof@1.2.0(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
statuses@2.0.2(transitive)- Removed
toidentifier@1.0.1(transitive)- Removed
type-is@2.1.0(transitive)- Removed
unpipe@1.0.0(transitive)- Removed
vary@1.1.2(transitive)- Removed
which@2.0.2(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
zod-to-json-schema@3.25.2(transitive)