MCP Observatory
npm analyzed 1.4.1 unconfirmed MCP

@frontmcp/adapters

v1.4.1
npm

Adapters for the FrontMCP framework

maintainer
davidfrontegg
license
Apache-2.0
first seen
2026-05-22
last seen
2026-06-16
releases · 30d
6
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution ×3 in @frontmcp/sdk
capabilities 0 tools
transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidence v1.4.1 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

network 6

  • net package/esm/index.mjs :149 const response = await fetch(this.url, {
  • net package/esm/openapi/index.mjs :149 const response = await fetch(this.url, {
  • net package/esm/skills/index.mjs :784 const res = await fetch(url, { method: "GET", headers, signal: controller.signal });
  • net package/index.js :184 const response = await fetch(this.url, {
  • net package/openapi/index.js :184 const response = await fetch(this.url, {
  • net package/skills/index.js :879 const res = await fetch(url, { method: "GET", headers, signal: controller.signal });

secrets 4

  • secrets package/esm/index.mjs :355 3. Add staticAuth: { jwt: process.env.API_TOKEN }
  • secrets package/esm/openapi/index.mjs :355 3. Add staticAuth: { jwt: process.env.API_TOKEN }
  • secrets package/index.js :390 3. Add staticAuth: { jwt: process.env.API_TOKEN }
  • secrets package/openapi/index.js :390 3. Add staticAuth: { jwt: process.env.API_TOKEN }

declared dependencies 8

  • @frontmcp/auth@1.4.1
  • @frontmcp/di@1.4.1
  • @frontmcp/sdk@1.4.1
  • @frontmcp/utils@1.4.1
  • js-yaml@^4.1.0
  • mcp-from-openapi@2.3.0
  • openapi-types@^12.1.3
  • @frontmcp/lazy-zod@1.4.1