Evaluation report
Warnings@playcanvas/editor-mcp-server · mcpb2d2186· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/playcanvas/editor-mcp-server @ b2d2186 — ★ 113 · TypeScript · MIT · last push 2 weeks ago
Manifest detected
kind=mcp slug=playcanvas-editor-mcp-server · source=package.json
Slug is URL-safe
"playcanvas-editor-mcp-server" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/playcanvas-editor-mcp-server
Version is semver
0.1.0
Documentation
4 passed1 warningDescription qualitywarn
Only 5 words · 32 chars — more detail helps discovery
Tell consumers what this artifact does in a full sentence.
README is present and substantial
4,620 chars · 3 sections · 2 code blocks
Tags / topics declared
11 total — playcanvas, editor, mcp, cli, javascript, mcp-server (+5)
README has usage / example sections
found: Installation
Homepage / docs URL declared
https://github.com/playcanvas/editor-mcp-server#readme
Safety
2 passed1 warningDependencies: known vulnerabilitieswarn
2 high/critical advisories — @modelcontextprotocol/[email protected] (HIGH: GHSA-345p-7cg4-v4c7) · [email protected] (HIGH: GHSA-96hv-2xvq-fx4p)
Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
5 passedMCP: launch path
bin: mcp-server · scripts.start
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^1.25.2"
MCP: SDK version pinned
pinned at "^1.25.2"
MCP: ESM package
"type": "module"
MCP: server surface
0 tools
Maintenance
2 passed1 warningTests detectedwarn
no test/tests/__tests__/spec/t/ dirs, no JVM src/test/, and no JS/TS/Python/Go/Ruby/Elixir test files
Add tests (even a smoke test). Consumers gauge maintenance quality by their presence.
Recent activity
last push 2 weeks ago
CI configuration detected
GitHub Actions (2 workflows)
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.