@modelcontextprotocol/client
Model Context Protocol implementation for TypeScript - Client package
86%
Total Score
healthy
Active organization-backed project with strong maintenance and provenance, offset by workflow hygiene concerns.
Health Score Breakdown
All seven workflows were analyzed with no untrusted checkouts or script-injection findings, and three use job-level or read-only permissions. However, 27 of 42 action references are unpinned, and high-confidence adhoc package installation plus trusted-publishing findings weaken workflow hygiene; the low-confidence cache-poisoning finding is only supporting evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zod Version ^4.2.0 | — | — |
jose Version ^6.1.3 | — | — |
cross-spawn Version ^7.0.5 | — | — |
eventsource Version ^3.0.2 | — | — |
pkce-challenge Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 6 months ago
- Unpacked Size
- 6.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.