npm · devbox-mcp0.0.3-alpha.4

Item: devbox-mcp
Rating: 4
Author: MCPSafe

Scanned 5/1/2026, 9:16:52 AM·Cached result·Fast Scan·45 rules·View source ↗·How we decide ↗

1 of 1 finding

medium (1)

LLM summary— devbox-mcp:0.0.3-alpha.4

This package has a solid security grade of B and a safety score of 87, with no critical or high-severity issues. The only concern is a single medium-severity server configuration finding, which poses minimal risk given the overall strong score and lack of serious vulnerabilities. It’s safe to install, but review the configuration detail to ensure it aligns with your environment.

Want deeper analysis?

Fast scan found 1 finding using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.

View plans Scan another package

Building your own MCP server?

Run this exact engine on your private repo — before users see it on /scan.

Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.

See plans with Private scans How private scans stay private

1 of 1 finding

40	"refreshAuth": "vsts-npm-auth -config .npmrc -F",
41	"format": "prettier --write \"src/*/.ts\"",
42	"lint": "eslint .",
43	"prepare": "husky"
44	},
45	"dependencies": {
46	"@azure/arm-devcenter": "^1.0.0-beta.2",

40	"refreshAuth": "vsts-npm-auth -config .npmrc -F",
41	"format": "prettier --write \"src/*/.ts\"",
42	"lint": "eslint .",
43	"prepare": "husky"
44	},
45	"dependencies": {
46	"@azure/arm-devcenter": "^1.0.0-beta.2",

npm · devbox-mcp0.0.3-alpha.4

medium (1)

medium (1)

LLM summary— devbox-mcp:0.0.3-alpha.4

Signal scores

LLM judge panel

CVE check

Community trust

Scan details

MCP Server Information

Run this exact engine on your private repo — before users see it on /scan.

medium (1)

medium (1)

Severity breakdown