github JavaScript re-analysis due

hypequery/hypequery

v0.15.0
github

Code-first TypeScript semantic layer for ClickHouse datasets, metrics, multi-tenancy, and AI agents

maintainer
hypequery
licence
Apache-2.0
first seen
2026-07-06
last seen
2026-09-15
releases · 30d
138
short id

hypequery/hypequery is an MCP server distributed on github, maintained by hypequery, tracked here since July 2026. It has shipped 513 releases (currently 0.15.0). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-15: 1 tool removed.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 438 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
0.0.0-canary-20260915132709 2026-09-15 npm
0.0.0-canary-20260915070045 2026-09-15 npm
0.0.0-canary-20260914155912 2026-09-14 npm
0.0.0-canary-20260911201502 2026-09-11 npm
0.0.0-canary-20260911110738 2026-09-11 npm
0.0.0-canary-20260908200430 2026-09-08 npm
0.15.0 2026-09-08 npm
0.0.0-canary-20260908200401 2026-09-08 npm
@hypequery/protocol@0.13.0 2026-09-08 github
@hypequery/clickhouse@2.10.1 2026-09-08 github

view all →