LLM summary— cli:1.15.0

This package presents minimal security risk, earning an A grade with a safety score of 87/100 and an AIVSS of just 0.5/10, with zero critical, high, or medium vulnerabilities detected. The only findings are two low-severity readiness issues, suggesting the package may have some gaps in production-readiness or deployment maturity rather than any active security threats. It is generally safe to install, though developers should review the readiness findings to ensure it meets their operational requirements.

Signal scores

Static100

CVE check100

Publisher identity10

Permissions100

Supply chain96

Typosquat100

Package health70

Community82

Secrets & exfil100

Injection risks100

Destructive ops100

LLM judge panel

CVE check

No known CVEs found for this package or its dependencies.

Community trust

No community reports

Security policy: Not found
Advisories: 0

Scan details

Total findings: 2
Affected tools: 0 / 1
Scan type: Fast Scan
Rules run: 45
LLM consensus score: N/A
Scanned: 13d ago
Source: NPM

MCP Server Information

Source: NPM
Package: cli
Version: 1.15.0
License: SEE LICENSE IN LICENSE
Publisher: chris-demartini
Verified: No
Added: 27 days ago
Versions: 98
Ecosystem: Node.js / npm
Downloads/wk: 7.6K
Dependencies: 3

60	}
61	}
62	}
63	} catch {}
64
65	if ($commands.Count -eq 0) {
66	[void]$commands.Add('visa-cli')

60	}
61	}
62	}
63	} catch {}
64
65	if ($commands.Count -eq 0) {
66	[void]$commands.Add('visa-cli')

npm · cli1.15.0

low (2)

low (2)

LLM summary— cli:1.15.0

Signal scores

LLM judge panel

CVE check

Community trust

Scan details

MCP Server Information

Run this exact engine on your private repo — before users see it on /scan.

low (2)

low (2)

Severity breakdown

5	function Wait-BeforeExit {
6	if ($Host.Name -eq 'ConsoleHost' -and -not [Console]::IsInputRedirected -and -not $env:CI) {
7	try { Read-Host "`n Press Enter to close" } catch {}
8	}
9	}