
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
SWAPI: characters, planets, films, starships, vehicles and species, with film cross-references — keyless.
SWAPI: characters, planets, films, starships, vehicles and species, with film cross-references — keyless.
Keyless — no signup, no API key, no environment variables.
npx -y swapi-mcp
Or add it to your MCP client:
{
"mcpServers": {
"swapi-mcp": { "command": "npx", "args": ["-y", "swapi-mcp"] }
}
}
| Tool | What it does |
|---|---|
search_star_wars | Search any resource by name |
star_wars_detail | One record with its full field list |
list_resource | First page of a resource |
film_chronicle | All nine films in story order |
character_films | Which films a character appears in |
SWAPI people matching "skywalker" (3 results):
1. Luke Skywalker — born 19BBY, male, 172cm, 77kg (id 1)
Uses swapi.dev and falls back to the community mirror swapi.py4e.com when the primary is down. Covers the six classic films' data set only — newer series are not in SWAPI.
MIT
FAQs
SWAPI: characters, planets, films, starships, vehicles and species, with film cross-references — keyless.
The npm package swapi-mcp receives a total of 141 weekly downloads. As such, swapi-mcp popularity was classified as not popular.
We found that swapi-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.