Evaluation report

• Repository is reachable

  https://github.com/canvasxai/sketch @ 84319be — ★ 179 · TypeScript · NOASSERTION · last push today

• Manifest detected

  kind=mcp slug=sketch-server · path=packages/server · source=package.json

• Slug is URL-safe

  "sketch-server" matches /^[a-z0-9][a-z0-9-]{0,62}$/

• Slug is unique within kind

  No collision found for mcp/sketch-server

• Version is semver

  0.46.0

• Description qualitywarn

  Only 3 words · 25 chars — more detail helps discovery

  Tell consumers what this artifact does in a full sentence.

• Tags / topics declaredwarn

  No manifest tags and no GitHub repo topics

  Add tags to the manifest (or GitHub topics on the repo) so the registry's search and category filters surface this artifact.

• README is present and substantial

  7,278 chars · 10 sections · 3 code blocks

• README has usage / example sections

  found: Quick Start

• Homepage / docs URL declared

  no homepage declared (registry will use the repo URL) — info-only, not blocking

• Dependencies: known vulnerabilitieswarn

  4 high/critical advisories — @hono/[email protected] (HIGH: GHSA-wc8c-qw6v-h7f6) · @whiskeysockets/[email protected] (CRITICAL: GHSA-qvv5-jq5g-4cgg) (+2)

  Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)

• LICENSE file at repo root

  LICENSE

• No sensitive files in the repo

  scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found

• MCP: launch path

  scripts.start

• MCP: @modelcontextprotocol/sdk in dependencies

  pinned at "^1.27.1"

• MCP: SDK version pinned

  pinned at "^1.27.1"

• MCP: ESM package

  "type": "module"

• MCP: server surface

  0 tools

• Recent activity

  last push today

• Tests detected

  1 test directory · 326 test files

• CI configuration detected

  GitHub Actions (5 workflows)

This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.