
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
MCP server for FinanceRateCalc — lender-level FHA denial statistics from the complete 2025 federal HMDA record. Historical observations, never individual predictions.
Query lender-level FHA denial statistics from the complete 2025 federal HMDA record (1,217,297 credit decisions) directly from an AI agent.
Tools: get_national_fha_stats · get_lender_denial_stats · list_lenders ·
get_state_denial_stats · get_door_effect_summary
The red line: every figure is a historical aggregate. This server will never accept borrower details or return individual approval predictions.
Streamable HTTP endpoint — connect any MCP client directly:
https://frc-mcp.ziyetis.workers.dev
{
"mcpServers": {
"financeratecalc": {
"command": "npx",
"args": ["-y", "frc-mcp"]
}
}
}
Data: CC BY 4.0, attribution to financeratecalc.com. Source of truth: public CFPB HMDA 2025 (loan_type 2; actions 1,2,3). Methodology: https://financeratecalc.com/about.html and SSRN 7156938.
FAQs
MCP server for FinanceRateCalc — lender-level FHA denial statistics from the complete 2025 federal HMDA record. Historical observations, never individual predictions.
The npm package frc-mcp receives a total of 28 weekly downloads. As such, frc-mcp popularity was classified as not popular.
We found that frc-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.