tempest/mcp v3.19.2 appears usable but is a young package with limited demonstrated adoption and a concentrated maintenance base. It is actively released, backed by an organization-owned repository, not deprecated or archived, and includes repository tests and a clear MIT license. However, the package is only 41 days old, has four releases, zero recorded popularity, eight commits from two contributors with one responsible for 87.5% of commits, no security policy or scanning tooling, and no recent issue or pull-request activity. These factors make it a reasonable dependency with some maintenance and transparency risk rather than a clearly mature choice.
68%
Total Score
75
50
83
90
The package declares 11 runtime dependencies, all within the Tempest ecosystem plus PHP. This is a meaningful dependency surface, though the cohesive ecosystem reduces some concern.
The package is only 41 days old with four releases and a median interval of about 6 days. This shows active early development but provides limited evidence of long-term stability.
Two contributors are active, but the top contributor made 87.5% of the recent commits. The organization backing provides some ability to hand off maintenance, but the observed activity remains concentrated.
There were no new or closed issues and no new, merged, or open pull requests in the measured month. With no issue activity to demonstrate community maintenance, this is a modest transparency concern.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal for this still-young package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tempest/core Version 3.19.2 | — | — |
tempest/http Version 3.19.2 | — | — |
tempest/mapper Version 3.19.2 | — | — |
tempest/router Version 3.19.2 | — | — |
tempest/console Version 3.19.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.