npm · mcp-express1.4.1

Item: mcp-express
Rating: 4
Author: MCPSafe

Scanned 5/1/2026, 1:27:10 PM·Cached result·Fast Scan·45 rules·View source ↗·How we decide ↗

1 of 1 finding

medium (1)

LLM summary— mcp-express:1.4.1

This package has a B-grade security rating with one medium-severity vulnerable dependency that needs attention before installation. The safety score of 89/100 is solid, though the AIVSS score of 3.9/10 suggests some supply chain risk factors warrant review. You should identify and patch the flagged dependency or confirm it's mitigated in your deployment environment before using this package.

Want deeper analysis?

Fast scan found 1 finding using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.

View plans Scan another package

Building your own MCP server?

Run this exact engine on your private repo — before users see it on /scan.

Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.

See plans with Private scans How private scans stay private

npm · mcp-express1.4.1

medium (1)

medium (1)

LLM summary— mcp-express:1.4.1

Signal scores

LLM judge panel

CVE check

Community trust

Scan details

MCP Server Information

Run this exact engine on your private repo — before users see it on /scan.

medium (1)

medium (1)

Severity breakdown