
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
dendro-react-mcp
Advanced tools
MCP server for React and React Native codebase analysis — 34 free tools: component trees, per-component complexity, prop flow, rerender risk (React Compiler aware), navigation graphs (Expo Router / Next.js / Remix / React Navigation), context maps, live r
The standalone MCP server from Dendro React — 34 free tools that give AI agents deep visibility into React and React Native codebases. Analysis runs locally; your code never leaves your machine.
Add to your MCP client config (Claude Code, Cursor, etc.):
{
"mcpServers": {
"dendro-react": {
"command": "npx",
"args": ["-y", "dendro-react-mcp"]
}
}
}
The server treats its working directory as the workspace root. To point it elsewhere (or to
restrict file access explicitly), set the DENDRO_WORKSPACE_ROOT environment variable.
First call to make: get_usage_guide — returns the full tool index, sequencing rules, and the
running build's version stamp.
open_visualizer, visualize_*) and sidebar features light up when the
Dendro React VS Code extension is installed and running; every analysis tool works standalone.MIT © Rooney Industries LLC
FAQs
React codebase semantics for AI agents — component contracts, blast radius, rerender risk, effect hygiene, navigation graphs, health audits — plus a VS Code visualizer you both share. Free, local-only.
The npm package dendro-react-mcp receives a total of 0 weekly downloads. As such, dendro-react-mcp popularity was classified as not popular.
We found that dendro-react-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.