app-vitals/shipwright is an MCP server distributed on github, maintained by app-vitals, tracked here since June 2026. It has shipped 59 releases. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
Its 0 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.