@considered/harmful

v1.0.3npm· JavaScript

Most [MCP servers](https://github.com/modelcontextprotocol/servers) suggest using `npx -y` as the recommended way to install a server. This downloads and executes arbitrary scripts from the internet. This is grossly insecure and I think the MCP authors sh

The verdict

Aging — last published over a year ago — check before adopting. Check the repo for activity before adopting.

Check the repo for activity before adopting.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAging

PopularityUnknown

SecurityClean

LicensePermissive

DepsZero deps

Maintenance

Last published over a year ago — check before adopting.

Popularity

Download count unavailable.

Security

No known advisories for this version (OSV).

License

ISC

Dependencies

No runtime dependencies

Recent releases

1.0.3over a year ago
1.0.2over a year ago
1.0.1over a year ago
1.0.0over a year ago