← Back to search

@hyperscript-tools/mcp-server

GitHub Actions Scanned 19d ago

MCP server for original _hyperscript development — validation, completions, docs, and analysis with zero HyperFixi dependencies

npm ↗
? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, httpx, urllib, ws
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, open(), os, path, pathlib, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 47

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 157 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.0.1 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: playwright@1.40.0 (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: rollup@4.6.1 (GHSA-gcx4-mw62-g8wm) dependency_analyzer · 95%
medium
Vulnerable dependency: rollup@4.6.1 (GHSA-mw96-cpmx-2vgc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-5932) dependency_analyzer · 95%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/spanish-normalizer.ts:29 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/italian-normalizer.ts:27 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/polish-normalizer.ts:102 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/portuguese-normalizer.ts:29 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/french-normalizer.ts:37 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/morphology/ukrainian-normalizer.ts:34 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/cyrillic-keyword.ts:207 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/french-keyword.ts:21 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/romance-language-keyword.ts:119 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/romance-language-keyword.ts:152 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/romance-language-keyword.ts:248 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/vietnamese-keyword.ts:22 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/vietnamese-keyword.ts:140 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/portuguese-keyword.ts:21 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/polish-keyword.ts:57 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/semantic/src/tokenizers/extractors/spanish-keyword.ts:23 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/i18n/src/formatting.ts:52 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/i18n/src/utils/tokenizer-adapter.ts:429 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/packages/i18n/src/utils/tokenizer-adapter.ts:435 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/apps/docs-site/public/assets/index-9agQl9q3.js:9 entropy_analyzer · 80%
high
Long unicode escape chain in codetalcott-hyperfixi-4b4e68a/apps/docs-site/public/assets/index-9agQl9q3.js:20 entropy_analyzer · 80%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Required env vars (28) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1267 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%