security
Security
Every MCP risk signal in one place — CVEs, tool safety, drift, naming, licenses. Heuristic: review signals, not verdicts. New here? The Risk tab gives an at-a-glance composite grade per server; the Code Analysis tab shows what the static scanner found in published source.
91 CRITICAL
7960 HIGH
2859 MEDIUM
4790 LOW
16 NONE
Hijack targets: abandoned packages that are widely depended-on AND carry an open CVE — the combination that maximises blast radius if compromised. Ranked by a composite of staleness, incoming dependents, and worst CVE severity. A review signal, not a verdict.
No prime hijack targets.