Mostly safe — a couple of notes worth reading.
Scanned 5/13/2026, 8:44:59 AM·Cached result·Fast Scan·48 rules·How we decide ↗
AIVSS Score
Low
Severity Breakdown
0
critical
0
high
1
medium
0
low
MCP Server Information
Findings
This package earns a B grade with a safety score of 91/100 but carries a medium-severity vulnerable dependency that needs attention before installation. The single vulnerability is in a third-party dependency rather than the package code itself, making it a manageable risk if you're willing to monitor or patch that upstream issue. Given the solid safety score and absence of critical or high-severity findings, this is acceptable for most use cases provided you address the dependency vulnerability.
Scan Details
Want deeper analysis?
Fast scan found 1 finding using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.
Building your own MCP server?
Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.
1 of 1 finding
1 finding