github TypeScript analyzed a8ca527

Lulu-The-Narwhal/lulu-ads

v0.9.14
github

Monetize MCP servers and AI agent tools with disclosed sponsored slots. Ships data, never directives. Fail-open by design.

maintainer
Lulu-The-Narwhal
licence
MIT
first seen
2026-07-19
last seen
2026-09-08
releases · 30d
14
short id

Lulu-The-Narwhal/lulu-ads is an MCP server distributed on github, maintained by Lulu-The-Narwhal, tracked here since July 2026. It has shipped 45 releases (currently 0.9.14) and exposes 1 tool. Tools include search. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-14: 1 tool removed.

full security breakdown →
tools 1
  • search
release cadence · 90d 45 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
0.9.14 2026-09-08 pypi
0.9.13 2026-09-06 pypi
0.9.12 2026-09-06 pypi
0.9.11 2026-09-06 pypi
0.9.10 2026-09-06 pypi
0.9.9 2026-09-06 pypi
0.9.8 2026-09-06 pypi
0.9.7 2026-09-03 pypi
0.9.6 2026-08-30 pypi
0.9.5 2026-08-26 pypi

view all →