Mostly safe — a couple of notes worth reading.

npm · ralphy2.20.1

Scanned 5/12/2026, 6:15:58 AM·Cached result·Fast Scan·48 rules·View source ↗·How we decide ↗

1 of 1 finding

medium (1)

LLM summary— ralphy:2.20.1

This package earns a B grade with a safety score of 88/100 but carries a moderate AIVSS risk rating of 2.2/10, indicating some security concerns relative to MCP server standards. The single medium-severity finding relates to server configuration, which could affect how safely it operates in your environment. While no critical or high-severity issues were detected, you should review the configuration recommendation before deployment.

Want deeper analysis?

Fast scan found 1 finding using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.

View plans Scan another package

Building your own MCP server?

Run this exact engine on your private repo — before users see it on /scan.

Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.

See plans with Private scans How private scans stay private

1 of 1 finding

51	"check:circular:ci": "depcruise packages//src apps//src --config .dependency-cruiser.cjs",
52	"check:unused:ci": "knip",
53	"check:outdated:ci": "bun scripts/check-outdated.ts",
54	"prepare": "bunx husky",
55	"build:publish": "bunx nx run-many --target=build --projects=cli,mcp --output-style stream && bun run copy-assets",
56	"copy-assets": "bun scripts/copy-assets.ts",
57	"prepublishOnly": "bun run build:publish"

51	"check:circular:ci": "depcruise packages//src apps//src --config .dependency-cruiser.cjs",
52	"check:unused:ci": "knip",
53	"check:outdated:ci": "bun scripts/check-outdated.ts",
54	"prepare": "bunx husky",
55	"build:publish": "bunx nx run-many --target=build --projects=cli,mcp --output-style stream && bun run copy-assets",
56	"copy-assets": "bun scripts/copy-assets.ts",
57	"prepublishOnly": "bun run build:publish"

npm · ralphy2.20.1

medium (1)

medium (1)

LLM summary— ralphy:2.20.1

Signal scores

LLM judge panel

CVE check

Community trust

Scan details

MCP Server Information

Run this exact engine on your private repo — before users see it on /scan.

medium (1)

medium (1)

Severity breakdown