npm JavaScript analyzed 0.2.51

wonderwhy-er/DesktopCommanderMCP

v0.2.51
npm

MCP server for terminal operations and file editing

maintainer
wonderwhy-er
licence
MIT
first seen
2026-06-01
last seen
2026-09-18
releases · 30d
6
short id

wonderwhy-er/DesktopCommanderMCP is an MCP server distributed on npm, maintained by wonderwhy-er, tracked here since June 2026. It has shipped 160 releases (currently 0.2.51). Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict. 2 known CVEs on file.

what we found

2 advisories published against this server still applies to the version it ships, the most severe rated medium, most recently 2026-06-03.

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 13 releases
06-21 00:00 08-04 00:00 now
recent releases last 10
version date src
v0.2.51 2026-09-17 github
0.2.51 2026-09-17 npm
v0.2.50 2026-09-09 github
0.2.50 2026-09-09 npm
v0.2.48 2026-09-02 github
0.2.48 2026-09-02 npm
0.2.47 2026-08-04 npm
0.2.46 2026-07-14 npm
0.2.45 2026-07-10 npm
v0.2.44 2026-07-09 github

view all →