demmmmios/mcp
This is a usable but relatively young package with a clear MIT license, regular release cadence, a non-archived repository, matching package/repository identity, repository tests, and no install-time lifecycle scripts or dangerous workflow patterns. The main concerns are that the project is only 98 days old, has no recorded commits or active maintainers in the last 3 months, has zero repository popularity, lacks a security policy and explicit workflow token permissions, and is published by a single individual. These factors make long-term maintenance and security transparency less certain, so dependency adoption is reasonable with monitoring but not low-risk.
63%
Total Score
38
100
78
80
Health Score Breakdown
The repository recorded zero commits and zero active maintainers over the last 3 months, which is a significant maintenance warning despite the recent package release and repository push.
Only one registry account has publish access, creating a bus-factor and continuity concern. The individual-owned repository provides some backing context but does not establish a broader maintainer base.
The repository is owned by an individual rather than an organization, so there is no observed organizational backing to offset the single-maintainer concern.
The package has 11 releases over 98 days, with releases approximately weekly, showing active short-term publishing and iteration. However, the limited age provides little evidence of long-term durability.
There were no new or closed issues or pull requests in the last month and no merged pull requests, providing no evidence of community-driven maintenance. The null open-issues count is unknown rather than negative.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Milan Felix Šulc |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mcp/sdk Version ^0.8.1 | — | — |
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
psr/simple-cache Version ^2.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 20 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.