github TypeScript re-analysis due

LE-VAI/designesy-org

v1.12.0
github

40-check design contract verification engine — score any URL, gate your CI, enforce DTCG 2025.10 tokens. MCP server + GitHub Action + stylelint plugin + CLI.

maintainer
LE-VAI
licence
MIT
first seen
2026-08-05
last seen
2026-09-17
releases · 30d
3
short id

LE-VAI/designesy-org is an MCP server distributed on github, maintained by LE-VAI, tracked here since August 2026. It has shipped 34 releases (currently 1.12.0) and exposes 17 tools. Tools include designesy_a11y_score, designesy_agent_json, designesy_catalog, designesy_compare, designesy_contract, designesy_design_review, and 11 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 17 tools appear to reach filesystem, shell / exec, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-17: 17 tools added and 11 tools removed.

full security breakdown →
tools 17
  • designesy_a11y_score
  • designesy_agent_json
  • designesy_catalog
  • designesy_compare
  • designesy_contract
  • designesy_design_review
  • designesy_drift_score
  • designesy_guardrails
  • designesy_llms_full_txt
  • designesy_llms_txt
  • designesy_monitor_score
  • designesy_motion_score
  • designesy_readiness_score
  • designesy_report
  • designesy_score
  • designesy_skill_md
  • designesy_tokens_score
release cadence · 90d 34 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
v1.12.0 2026-08-31 github
1.12.0 2026-08-31 pypi
1.11.1 2026-08-30 pypi
1.11.0 2026-08-16 pypi
v1.11.0 2026-08-16 github
1 2026-08-16 pypi
1.10.2 2026-08-16 pypi
1.10.1 2026-08-15 pypi
stylelint-v0.2.0 2026-08-15 github
stylelint-v0.1.1 2026-08-15 github

view all →