fpl-mcp-server
Advanced tools
fpl-mcp-server - npm Package Compare versions
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
No License Found
LicenseLicense information could not be found.
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
No website
QualityPackage does not have a website.
Improved metrics
- Total package byte prevSize
3694
999.4%- Number of package files
4
100%- Number of low license alerts
0
-100%- Lines of code
16
Infinity%- Number of low maintenance alerts
0
-100%- Number of low quality alerts
2
-33.33%- Number of lines in readme file
25
525%Worsened metrics
- Dependency count
1
Infinity%- Number of low supply chain risk alerts
5
400%Dependency changes
+ Added
mcp-remote@^0.14.3+ Added
accepts@1.3.8(transitive)+ Added
array-flatten@1.1.1(transitive)+ Added
async-function@1.0.0(transitive)+ Added
async-generator-function@1.0.0(transitive)+ Added
body-parser@1.20.8(transitive)+ Added
bundle-name@4.1.1(transitive)+ Added
bytes@3.1.2(transitive)+ Added
call-bind-apply-helpers@1.0.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
content-disposition@0.5.4(transitive)+ Added
content-type@1.0.5(transitive)+ Added
cookie@0.7.2(transitive)+ Added
cookie-signature@1.0.7(transitive)+ Added
debug@2.6.9(transitive)+ Added
default-browser@5.5.1(transitive)+ Added
default-browser-id@5.0.1(transitive)+ Added
define-lazy-prop@3.0.0(transitive)+ Added
depd@2.0.0(transitive)+ Added
destroy@1.2.0(transitive)+ Added
dunder-proto@1.0.1(transitive)+ Added
ee-first@1.1.1(transitive)+ Added
encodeurl@2.0.0(transitive)+ Added
es-define-property@1.0.1(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
es-object-atoms@1.1.2(transitive)+ Added
escape-html@1.0.3(transitive)+ Added
etag@1.8.1(transitive)+ Added
express@4.22.3(transitive)+ Added
finalhandler@1.3.2(transitive)+ Added
forwarded@0.2.0(transitive)+ Added
fresh@0.5.2(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
generator-function@2.0.1(transitive)+ Added
get-intrinsic@1.3.1(transitive)+ Added
get-proto@1.0.1(transitive)+ Added
gopd@1.2.0(transitive)+ Added
has-symbols@1.1.0(transitive)+ Added
hasown@2.0.4(transitive)+ Added
http-errors@2.0.1(transitive)+ Added
iconv-lite@0.4.24(transitive)+ Added
inherits@2.0.4(transitive)+ Added
ipaddr.js@1.9.1(transitive)+ Added
is-docker@3.0.0(transitive)+ Added
is-inside-container@1.0.0(transitive)+ Added
is-wsl@3.1.1(transitive)+ Added
math-intrinsics@1.1.0(transitive)+ Added
mcp-remote@0.14.5(transitive)+ Added
media-typer@0.3.0(transitive)+ Added
merge-descriptors@1.0.3(transitive)+ Added
methods@1.1.2(transitive)+ Added
mime@1.6.0(transitive)+ Added
mime-db@1.52.0(transitive)+ Added
mime-types@2.1.35(transitive)+ Added
ms@2.0.02.1.3(transitive)+ Added
negotiator@0.6.3(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
on-finished@2.4.1(transitive)+ Added
open@10.2.0(transitive)+ Added
parseurl@1.3.3(transitive)+ Added
path-to-regexp@0.1.13(transitive)+ Added
proxy-addr@2.0.8(transitive)+ Added
qs@6.16.1(transitive)+ Added
range-parser@1.2.1(transitive)+ Added
raw-body@2.5.3(transitive)+ Added
run-applescript@7.1.0(transitive)+ Added
safe-buffer@5.2.1(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
send@0.19.2(transitive)+ Added
serve-static@1.16.3(transitive)+ Added
setprototypeof@1.2.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
statuses@2.0.2(transitive)+ Added
strict-url-sanitise@0.0.1(transitive)+ Added
toidentifier@1.0.1(transitive)+ Added
type-is@1.6.18(transitive)+ Added
undici@7.30.1(transitive)+ Added
unpipe@1.0.0(transitive)+ Added
utils-merge@1.0.1(transitive)+ Added
vary@1.1.2(transitive)+ Added
wsl-utils@0.1.0(transitive)