Evaluation report
Warningscontextplus · mcp393875a· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/forloopcodes/contextplus @ 393875a — ★ 1,923 · TypeScript · MIT · last push 7 weeks ago
Manifest detected
kind=mcp slug=contextplus · source=package.json
Slug is URL-safe
"contextplus" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/contextplus
Version is semver
1.0.9
Documentation
4 passed1 warningDescription qualitywarn
Only 3 words · 22 chars — more detail helps discovery
Tell consumers what this artifact does in a full sentence.
README is present and substantial
13,785 chars · 6 sections · 9 code blocks
Tags / topics declared
1 total — mcp-server
README has usage / example sections
found: Quick Start
Homepage / docs URL declared
https://contextplus.vercel.app
Safety
2 passed1 warningDependencies: known vulnerabilitieswarn
6 high/critical advisories — @modelcontextprotocol/[email protected] (HIGH: GHSA-345p-7cg4-v4c7) · @modelcontextprotocol/[email protected] (HIGH: GHSA-8r9q-7v3j-jr4g) (+4)
Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
6 passedMCP: launch path
bin: contextplus · scripts.start
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^1.12.1"
MCP: SDK version pinned
pinned at "^1.12.1"
MCP: ESM package
"type": "module"
MCP: 8 tools declared
get_context_tree, semantic_identifier_search, get_file_skeleton, semantic_code_search
MCP: server surface
8 tools · 1 resource
Maintenance
2 passed1 warningCI configuration detectedwarn
no CI config found (looked for GitHub Actions, CircleCI, GitLab CI, etc.)
Add a simple workflow (lint + test on PR) — it tells consumers the artifact is built reproducibly.
Recent activity
last push 7 weeks ago
Tests detected
23 test files
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.