Evaluation report
Warningsnvim-mcp · mcpf536171· 2 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
8 passedRepository is reachable
https://github.com/paulburgess1357/nvim-mcp @ f536171 — ★ 60 · Python · MIT · last push 3 days ago
Manifest detected
kind=mcp slug=nvim-mcp · source=pyproject.toml
Slug is URL-safe
"nvim-mcp" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/nvim-mcp
Version is semver
1.1.0
Manifest present and parseable
Manifest found at pyproject.toml.
Name declared and well-formed
Name "nvim-mcp" is well-formed.
Version is semver
Version 1.1.0.
Documentation
8 passed1 warningHomepage or repository declaredwarn
No homepage or repository declared.
Add a "homepage" or "repository" field to pyproject.toml.
Description quality
9 words · 60 chars — OK but more detail helps
README is present and substantial
5,677 chars · 7 sections · 1 code block
Tags / topics declared
18 total — ai, artificial-intelligence, claude, claude-code, codex, cursor (+12)
README has usage / example sections
found: Quick start
Homepage / docs URL declared
no homepage declared (registry will use the repo URL) — info-only, not blocking
Safety
11 passed1 warning2 queuedNo code built at runtimewarn
1 construct that builds code at runtime. src/nvim_mcp/client.py:99 — eval() on a non-literal
Replace dynamic execution with an explicit dispatch table or a parsed data format. If a shell command is genuinely required, pass an argument array rather than a string, and never interpolate untrusted input into it.
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
No dependencies that impersonate popular packages
20 dependencies, none impersonating a popular package.
Kind-specific
4 passed1 queuedMCP: launch path
launch declared in pyproject.toml
MCP: @modelcontextprotocol/sdk in dependencies
non-Node server (pyproject.toml) — uses its language's MCP SDK
MCP: ESM package
non-Node server (pyproject.toml) — n/a
MCP: server surface
0 tools
Maintenance
2 passed1 warning1 queuedCI configuration detectedwarn
no CI config found (looked for GitHub Actions, CircleCI, GitLab CI, etc.)
Add a simple workflow (lint + test on PR) — it tells consumers the artifact is built reproducibly.
Recent activity
last push 3 days ago
Tests detected
1 test directory · 3 test files
Behavioral
This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.