github TypeScript analyzed 74f7573

AraneaDev/Momus-MCP

github

Local-first MCP server and CLI that audits test suites for false-green tests: tautological assertions, mock-contract drift, and mock hygiene. Read-only and deterministic, across TypeScript, PHP, Python and Rust.

maintainer
AraneaDev
licence
MIT
first seen
2026-08-17
last seen
2026-09-09
releases · 30d
11
short id

AraneaDev/Momus-MCP is an MCP server distributed on github, maintained by AraneaDev, tracked here since August 2026. It has shipped 11 releases and exposes 11 tools. Tools include apply_issue_fix, audit_test_fidelity, audit_workspace, detect_tautological_assertions, doctor_status, explain_issue, and 5 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 11 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-10: 11 tools added and 5 tools removed.

full security breakdown →
tools 11
  • apply_issue_fix
  • audit_test_fidelity
  • audit_workspace
  • detect_tautological_assertions
  • doctor_status
  • explain_issue
  • get_ir
  • list_rules
  • preview_issue_fix
  • synthesize_mock_contract
  • verify_mock_drift
release cadence · 90d 11 releases
06-16 00:00 07-30 00:00 now
recent releases last 10
version date src
v0.0.11 2026-08-19 github
v0.0.10 2026-08-19 github
v0.0.9 2026-08-19 github
v0.0.8 2026-08-18 github
v0.0.7 2026-08-17 github
v0.0.6 2026-08-17 github
v0.0.5 2026-08-17 github
v0.0.4 2026-08-17 github
v0.0.3 2026-08-17 github
v0.0.2 2026-08-16 github

view all →