← Back to search

@deweyou-design/mcp

GitHub Actions Scanned 26d ago

Read-only MCP server and LLM context generator for Deweyou Design.

npm
B
80.5 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

list_components
annotations: verified low

List public Deweyou Design components, optionally filtered by category.

readOnlyHint true
get_component
annotations: verified low

Return metadata for one public Deweyou Design component.

name string
readOnlyHint true
get_component_import
annotations: verified low

Return a root or subpath import snippet for one component.

name string subpath boolean
readOnlyHint true
list_style_entrypoints
annotations: verified low

List @deweyou-design/styles CSS, Less, token, and plugin entrypoints.

limit number query string category enum
readOnlyHint true
list_icons
annotations: verified low

List @deweyou-design/react-icons exports, optionally filtered by query/category.

limit number query string category enum
readOnlyHint true
get_icon_import
annotations: verified low

Return an import snippet for one @deweyou-design/react-icons export.

name string
readOnlyHint true

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 62

info
Tool 'list_components' annotations are consistent annotation_checker · 80%
info
Tool 'get_component' annotations are consistent annotation_checker · 80%
info
Tool 'get_component_import' annotations are consistent annotation_checker · 80%
info
Tool 'list_style_entrypoints' annotations are consistent annotation_checker · 80%
info
Tool 'list_icons' annotations are consistent annotation_checker · 80%
info
Tool 'get_icon_import' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-33r3-4whc-44c2) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-g8mr-85jm-7xhm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: beautiful-mermaid@catalog: (GHSA-cgmm-x5ww-q5cr) dependency_analyzer · 95%
medium
Vulnerable dependency: highlight.js@catalog: (GHSA-vfrc-7r7c-w9mx) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-4f6x-49g2-99fm) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-6m6c-36f7-fhxh) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-6x64-9x62-f2gx) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-87f9-hvmw-gh4p) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-c4c3-pg64-4m4v) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-ghcm-xqfw-q4vr) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-m4gq-x24j-jpmf) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-p3rp-vmj9-gv6v) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-w32g-5hqp-gg6q) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@catalog: (GHSA-xcj9-5m2h-648r) dependency_analyzer · 95%
medium
Vulnerable dependency: prismjs@catalog: (GHSA-gj77-59wh-66hg) dependency_analyzer · 95%
medium
Vulnerable dependency: prismjs@catalog: (GHSA-h4hr-7fg3-h35w) dependency_analyzer · 95%
medium
Vulnerable dependency: prismjs@catalog: (GHSA-hqhp-5p83-hx96) dependency_analyzer · 95%
medium
Vulnerable dependency: prismjs@catalog: (GHSA-x7hr-w5r2-h6wg) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_components manifest_parser · 85%
info
Tool: get_component manifest_parser · 85%
info
Tool: get_component_import manifest_parser · 85%
info
Tool: list_style_entrypoints manifest_parser · 85%
info
Tool: list_icons manifest_parser · 85%
info
Tool: get_icon_import manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 54 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%