Evaluation report
Warnings@makafeli/n8n-workflow-builder · mcp411c0a7· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/makafeli/n8n-workflow-builder @ 411c0a7 — ★ 525 · JavaScript · MIT · last push 3 months ago
Manifest detected
kind=mcp slug=makafeli-n8n-workflow-builder · source=package.json
Slug is URL-safe
"makafeli-n8n-workflow-builder" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/makafeli-n8n-workflow-builder
Version is semver
0.11.0
Documentation
5 passedDescription quality
8 words · 57 chars — OK but more detail helps
README is present and substantial
21,176 chars · 15 sections · 13 code blocks
Tags / topics declared
24 total — mcp, model-context-protocol, n8n, workflow, automation, server (+18)
README has usage / example sections
no labeled section but 13 code blocks document usage
Homepage / docs URL declared
https://github.com/makafeli/n8n-workflow-builder#readme
Safety
2 passed1 warningDependencies: known vulnerabilitieswarn
16 high/critical advisories — @modelcontextprotocol/[email protected] (HIGH: GHSA-345p-7cg4-v4c7) · @modelcontextprotocol/[email protected] (HIGH: GHSA-8r9q-7v3j-jr4g) (+14)
Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
6 passedMCP: launch path
bin: n8n-workflow-builder · scripts.start
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^1.17.0"
MCP: SDK version pinned
pinned at "^1.17.0"
MCP: ESM package
"type": "module"
MCP: 8 tools declared
list_workflows, list_workflows_full, create_workflow, get_workflow
MCP: server surface
8 tools
Maintenance
2 passed1 warningRecent activitywarn
last push 3 months ago — looks slowing down
Consumers prefer artifacts that are actively maintained (threshold: 90 days, configurable via EVAL_RECENCY_PASS_DAYS).
Tests detected
1 test directory · 7 test files
CI configuration detected
GitHub Actions (4 workflows)
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.