@verygoodplugins/mcp-local-wp
Advanced tools
@verygoodplugins/mcp-local-wp - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 5 instances
Improved metrics
- Total package byte prevSize
131614
56.28%- Dev dependency count
11
-8.33%- Number of package files
32
68.42%- Lines of code
1434
46.33%- Number of lines in readme file
609
5.73%- Number of low supply chain risk alerts
21
-16%Worsened metrics
- Dependency count
4
33.33%- Number of medium supply chain risk alerts
2
100%Dependency changes
+ Added
zod@^4.4.3+ Added
@modelcontextprotocol/core@2.4.0(transitive)+ Added
@modelcontextprotocol/server@2.4.0(transitive)+ Added
dotenv@18.0.9(transitive)- Removed
@modelcontextprotocol/sdk@^1.25.1- Removed
@hono/node-server@2.1.6(transitive)- Removed
@modelcontextprotocol/sdk@1.32.2(transitive)- Removed
accepts@2.0.0(transitive)- Removed
ajv@8.20.0(transitive)- Removed
ajv-formats@3.0.1(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
body-parser@2.4.0(transitive)- Removed
bytes@3.1.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
content-disposition@2.0.1(transitive)- Removed
content-type@1.0.52.1.0(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cookie-signature@1.2.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
debug@4.4.3(transitive)- Removed
depd@2.0.0(transitive)- Removed
dotenv@17.4.2(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
ee-first@1.1.1(transitive)- Removed
encodeurl@2.0.1(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
escape-html@1.0.3(transitive)- Removed
etag@1.8.1(transitive)- Removed
eventsource@3.0.7(transitive)- Removed
eventsource-parser@3.1.1(transitive)- Removed
express@5.3.0(transitive)- Removed
express-rate-limit@8.7.3(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-uri@3.1.9(transitive)- Removed
finalhandler@2.1.1(transitive)- Removed
forwarded@0.2.0(transitive)- Removed
fresh@2.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
hono@4.13.16(transitive)- Removed
http-errors@2.0.1(transitive)- Removed
inherits@2.0.4(transitive)- Removed
ip-address@10.7.6(transitive)- Removed
ipaddr.js@1.9.1(transitive)- Removed
is-promise@4.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jose@6.2.15(transitive)- Removed
json-schema-traverse@1.0.0(transitive)- Removed
json-schema-typed@8.0.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
media-typer@1.1.1(transitive)- Removed
merge-descriptors@2.0.0(transitive)- Removed
mime-db@1.54.0(transitive)- Removed
mime-types@3.0.2(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@1.1.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
on-finished@2.4.2(transitive)- Removed
once@1.4.0(transitive)- Removed
parseurl@1.3.3(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-to-regexp@8.4.2(transitive)- Removed
pkce-challenge@5.0.1(transitive)- Removed
proxy-addr@2.0.8(transitive)- Removed
qs@6.17.1(transitive)- Removed
range-parser@1.3.0(transitive)- Removed
raw-body@3.0.2(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
router@2.2.0(transitive)- Removed
send@1.2.1(transitive)- Removed
serve-static@2.2.1(transitive)- Removed
setprototypeof@1.2.0(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
statuses@2.0.2(transitive)- Removed
toidentifier@1.0.1(transitive)- Removed
type-is@2.1.0(transitive)- Removed
unpipe@1.0.0(transitive)- Removed
vary@1.1.2(transitive)- Removed
which@2.0.2(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
zod-to-json-schema@3.25.2(transitive)Updated
dotenv@^18.0.7Updated
mysql2@^3.24.5