Evaluation report
Warningsreddit-mcp-buddy · mcpebd70c3· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/karanb192/reddit-mcp-buddy @ ebd70c3 — ★ 722 · TypeScript · MIT · last push 4 weeks ago
Manifest detected
kind=mcp slug=reddit-mcp-buddy · source=package.json
Slug is URL-safe
"reddit-mcp-buddy" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/reddit-mcp-buddy
Version is semver
1.1.13
Documentation
5 passedDescription quality
16 words · 112 chars — "Clean, LLM-optimized Reddit MCP server. Browse posts, search content, analyze us…"
README is present and substantial
19,918 chars · 20 sections · 24 code blocks
Tags / topics declared
10 total — reddit, mcp, claude, ai, assistant, model-context-protocol (+4)
README has usage / example sections
found: Quick Start · Example
Homepage / docs URL declared
https://github.com/karanb192/reddit-mcp-buddy#readme
Safety
2 passed1 warningDependencies: known vulnerabilitieswarn
3 high/critical advisories — @modelcontextprotocol/[email protected] (HIGH: GHSA-345p-7cg4-v4c7) · @modelcontextprotocol/[email protected] (HIGH: GHSA-8r9q-7v3j-jr4g) (+1)
Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
5 passedMCP: launch path
bin: reddit-buddy, reddit-mcp-buddy · scripts.start
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^1.17.5"
MCP: SDK version pinned
pinned at "^1.17.5"
MCP: ESM package
"type": "module"
MCP: server surface
0 tools
Maintenance
3 passedRecent activity
last push 4 weeks ago
Tests detected
1 test directory
CI configuration detected
GitHub Actions (3 workflows)
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.