npm JavaScript analyzed 1.6.0

@drawio/mcp

v1.6.0
npm

Official draw.io MCP server for LLMs - Open diagrams in draw.io editor

maintainer
drawio
licence
Apache-2.0
first seen
2026-05-22
last seen
2026-09-17
releases · 30d
1
short id

@drawio/mcp is an MCP server distributed on npm, maintained by drawio, tracked here since May 2026. It has shipped 33 releases (currently 1.6.0). Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 6 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
1.6.0 2026-09-17 npm
1.5.0 2026-07-19 npm
1.4.1 2026-07-15 npm
1.4.0 2026-07-08 npm
1.3.4 2026-07-01 npm
1.3.3 2026-07-01 npm
1.3.2 2026-06-18 npm
1.3.1 2026-06-17 npm
1.2.8 2026-06-12 npm
1.2.7 2026-05-11 npm

view all →