Evaluation report

• Repository is reachable

  https://github.com/TickTockBent/charlotte @ 0d32de0 — ★ 164 · TypeScript · MIT · last push 3 weeks ago

• Manifest detected

  kind=mcp slug=ticktockbent-charlotte · source=package.json

• Slug is URL-safe

  "ticktockbent-charlotte" matches /^[a-z0-9][a-z0-9-]{0,62}$/

• Slug is unique within kind

  No collision found for mcp/ticktockbent-charlotte

• Version is semver

  0.7.0

• Description quality

  15 words · 100 chars — "Token-efficient browser MCP server — structured web pages for AI agents, not raw…"

• README is present and substantial

  22,000 chars · 18 sections · 26 code blocks

• Tags / topics declared

  17 total — mcp, mcp-server, browser-mcp, model-context-protocol, browser-automation, web-scraping (+11)

• README has usage / example sections

  found: Quick Start · Installation · Usage

• Homepage / docs URL declared

  https://github.com/ticktockbent/charlotte#readme

• Dependencies: known vulnerabilitieswarn

  3 high/critical advisories — @modelcontextprotocol/[email protected] (HIGH: GHSA-345p-7cg4-v4c7) · @modelcontextprotocol/[email protected] (HIGH: GHSA-8r9q-7v3j-jr4g) (+1)

  Update the affected packages, then re-publish. (`npm audit` shows the same data locally.)

• LICENSE file at repo root

  LICENSE

• No sensitive files in the repo

  scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found

• MCP: launch path

  bin: charlotte · scripts.start

• MCP: @modelcontextprotocol/sdk in dependencies

  pinned at "^1.12.0"

• MCP: SDK version pinned

  pinned at "^1.12.0"

• MCP: ESM package

  "type": "module"

• MCP: server surface

  0 tools

• Recent activity

  last push 3 weeks ago

• Tests detected

  2 test directories · 64 test files

• CI configuration detected

  GitHub Actions (2 workflows)

Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.