Evaluation report

• Repository is reachable

  https://github.com/zhizhuodemao/js-reverse-mcp @ a850f3e — ★ 2,169 · TypeScript · Apache-2.0 · last push 2 days ago

• Manifest detected

  kind=mcp slug=js-reverse-mcp · source=package.json

• Slug is URL-safe

  "js-reverse-mcp" matches /^[a-z0-9][a-z0-9-]{0,62}$/

• Slug is unique within kind

  No collision found for mcp/js-reverse-mcp

• Version is semver

  4.0.1

• Description quality

  31 words · 130 chars — "JS reverse engineering MCP server with agent-first tool design and built-in anti…"

• README is present and substantial

  13,735 chars · 14 sections · 20 code blocks

• Tags / topics declared

  16 total — mcp, mcp-server, javascript, reverse-engineering, devtools, debugging (+10)

• README has usage / example sections

  no labeled section but 20 code blocks document usage

• Homepage / docs URL declared

  https://github.com/zhizhuodemao/js-reverse-mcp#readme

• Dependencies: known vulnerabilities

  OSV.dev clean — 0 high/critical across 8 deps

• LICENSE file at repo root

  LICENSE

• No sensitive files in the repo

  scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found

• MCP: launch path

  bin: js-reverse-mcp · scripts.start

• MCP: @modelcontextprotocol/sdk in dependencies

  pinned at "1.29.0"

• MCP: SDK version pinned

  pinned at "1.29.0"

• MCP: ESM package

  "type": "module"

• MCP: server surface

  0 tools

• Recent activity

  last push 2 days ago

• Tests detected

  1 test directory · 19 test files

• CI configuration detected

  GitHub Actions (2 workflows)

This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.