Evaluation report
Warnings@craft-agent/session-mcp-server · mcpa512da7· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/craft-ai-agents/craft-agents-oss @ a512da7 — ★ 6,298 · TypeScript · Apache-2.0 · last push 11 days ago
Manifest detected
kind=mcp slug=craft-agent-session-mcp-server · path=packages/session-mcp-server · source=package.json
Slug is URL-safe
"craft-agent-session-mcp-server" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/craft-agent-session-mcp-server
Version is semver
0.10.3
Documentation
4 passed1 warningTags / topics declaredwarn
No manifest tags and no GitHub repo topics
Add tags to the manifest (or GitHub topics on the repo) so the registry's search and category filters surface this artifact.
Description quality
14 words · 110 chars — OK but more detail helps
README is present and substantial
24,637 chars · 19 sections · 23 code blocks
README has usage / example sections
found: Installation · Quick Start · Quick Start (+2)
Homepage / docs URL declared
no homepage declared (registry will use the repo URL) — info-only, not blocking
Safety
3 passedDependencies: known vulnerabilities
OSV.dev clean — 0 high/critical across 2 deps
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
4 passed1 warningMCP: ESM packagewarn
package.json missing "type": "module"
Modern MCP servers are ESM. Add `"type": "module"` unless you have a CJS-only reason.
MCP: launch path
bin: session-mcp-server
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^1.29.0"
MCP: SDK version pinned
pinned at "^1.29.0"
MCP: server surface
0 tools
Maintenance
3 passedRecent activity
last push 11 days ago
Tests detected
59 test directories · 351 test files
CI configuration detected
GitHub Actions (2 workflows)
Behavioral
This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.