npm JavaScript analyzed 0.2.3

@21st-dev/magic

v0.2.3
npm

Magic MCP is now the 21st MCP. This package is a compatibility proxy kept for old configs - new setups should use `npx @21st-dev/cli@latest init`. Setup: https://21st.dev/mcp

maintainer
bunasq
licence
ISC
first seen
2026-05-22
last seen
2026-09-17
releases · 30d
1
short id

@21st-dev/magic is an MCP server distributed on npm, maintained by bunasq, tracked here since May 2026. It has shipped 48 releases (currently 0.2.3) and exposes 1 tool. Tools include logo_search. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 1
  • logo_search search_logo (one query per call)
release cadence · 90d 4 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
0.2.3 2026-09-09 npm
0.2.2 2026-07-31 npm
0.2.1 2026-07-24 npm
0.2.0 2026-07-24 npm
0.1.1-beta.1 2025-12-23 npm
0.1.1-beta.0 2025-12-22 npm
0.1.0 2025-06-09 npm
0.0.47 2025-05-01 npm
0.0.46 2025-04-15 npm
0.0.41 2025-04-10 npm

view all →