npm JavaScript analyzed 1.0.0

@ceraph/react-native-mcp

v1.0.0

MCP server for React Native and Expo development

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v1.0.0 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 58

shell package/dist/cli.js :2 urn new Promise((_0x4bb25a,_0x3174df)=>{execFile(_0xc043b5,[..._0x14ee86],{'encoding':'utf8','windowsHide':!![],'maxBuffer':0x400*0x400,'env':_0xd52791},(_0x4ea638,_0x4402a0)=>_0x4ea638?_0x3174df(_0x4
shell package/dist/index.js :2 urn new Promise((_0x380656,_0x38b12a)=>{execFile(_0x1ee704,[..._0x2dda0d],{'encoding':'utf8','windowsHide':!![],'maxBuffer':0x400*0x400,'env':_0x172eec},(_0xea7024,_0x2c00b5)=>_0xea7024?_0x38b12a(

net package/dist/index.js :2 (0x149a)]()||'Computer',_0x4b648d=await fetch(_0x3cd167(_0x130535),{'method':'POST','headers':{'content-type':_0x33a12b(0x1341)},'body':JSON[_0x33a12b(0x1147)]({'action':_0x33a12b(0xd10),'publicKey':_

secrets package/dist/index.js :2 0x138530[_0x5257c7(0x4cc)]?.['trim']()||process.env.CERAPH_AUTH_TOKEN?.['trim']();if(_0x313a5e){if(_0x52eb0e?.[_0x5257c7(0x4cc)]===_0x313a5e)return _0x40dd5b(_0x52eb0e);const _0xeb83a0=_0x138530[_0x52

postinstall (suspicious) package/package.json :161 node -e "try{var e=process.env;if(e.CI||e.CERAPH_SKIP_POSTINSTALL||require('fs').existsSync(process.cwd()+'/../../pnpm-workspace.yaml'))process.exit(0);process.stderr.write('\n[@ceraph/react-native-mc

show 17 more