Evaluation report
Warningssmallcode · mcpc3fc7ba· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/Doorman11991/smallcode @ c3fc7ba — ★ 1,980 · JavaScript · MIT · last push 3 weeks ago
Manifest detected
kind=mcp slug=smallcode · source=package.json
Slug is URL-safe
"smallcode" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/smallcode
Version is semver
1.6.0
Documentation
5 passedDescription quality
9 words · 60 chars — OK but more detail helps
README is present and substantial
30,105 chars · 9 sections · 17 code blocks
Tags / topics declared
8 total — ai, coding-agent, llm, ollama, terminal, small-models (+2)
README has usage / example sections
found: Quick Start
Homepage / docs URL declared
no homepage declared (registry will use the repo URL) — info-only, not blocking
Safety
3 passedDependencies: known vulnerabilities
OSV.dev clean — 0 high/critical across 6 deps
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
2 passed2 warningsMCP: @modelcontextprotocol/sdk in dependencieswarn
No @modelcontextprotocol/sdk dependency declared
Run `npm i @modelcontextprotocol/sdk` so consumers can audit your stack.
MCP: ESM packagewarn
package.json missing "type": "module"
Modern MCP servers are ESM. Add `"type": "module"` unless you have a CJS-only reason.
MCP: launch path
bin: smallcode, smolv2, smallcode-init · scripts.start
MCP: server surface
0 tools
Maintenance
3 passedRecent activity
last push 3 weeks ago
Tests detected
1 test directory · 23 test files
CI configuration detected
GitHub Actions (1 workflows)
Behavioral
This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.