polaris/mcp
Polaris for PHP and the Model Context Protocol: protect any PHP MCP server with Polaris-issued tokens (RFC 9728, DPoP), and serve every Polaris endpoint and CLI command as an MCP tool under the caller's own permissions
58%
Total Score
caution
A one-day-old pre-1.0 package has no established maintenance or security track record.
Health Score Breakdown
The package declares 14 runtime dependencies, including several closely related Polaris components and framework packages; this increases dependency surface and integration coupling.
The package is only 1 day old with 3 releases, so it has little evidence of sustained maintenance or release discipline despite recent activity.
The repository shows 0 commits and 0 active maintainers over the last 3 months, but the project is only 1 day old, so this is more an absence of track record than evidence of abandonment.
Composer build tooling is present, but no security-scanning tools were detected for a package handling authentication, tokens, and request protection.
No security policy was found in the linked repository, which is a meaningful transparency gap for security-sensitive authentication and MCP components.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 2am.tech |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mcp/sdk Version ^0.8.1 | — | — |
psr/clock Version ^1.0 | — | — |
polaris/cli Version ^0.11 | — | — |
polaris/core Version ^0.11 | — | — |
polaris/psr15 Version ^0.11 | — | — |
Weekly Downloads
Info
- Last Published
- 21 hours ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.