npm JavaScript analyzed 0.2.39

@hasna/machines

v0.2.39
npm

Machine fleet management CLI + MCP for developers

maintainer
andreihasna2
licence
Apache-2.0
first seen
2026-06-22
last seen
2026-08-28
releases · 30d
8
short id

@hasna/machines is an MCP server distributed on npm, maintained by andreihasna2, tracked here since June 2026. It has shipped 102 releases (currently 0.2.39) and exposes 70 tools. Tools include machines_agent_status, machines_apps_apply, machines_apps_diff, machines_apps_list, machines_apps_plan, machines_apps_status, and 64 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 70 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-08-27: 3 tools added.

full security breakdown →
tools 20 of 70
  • machines_agent_status
  • machines_apps_apply
  • machines_apps_diff
  • machines_apps_list
  • machines_apps_plan
  • machines_apps_status
  • machines_backup_apply
  • machines_backup_preview
  • machines_browserplan_fleet
  • machines_cert_apply
  • machines_cert_preview
  • machines_command_matrix
  • machines_compatibility
  • machines_daemon_service_plan
  • machines_daemon_status
  • machines_details
  • machines_diff
  • machines_dispatch_fleet_smoke
  • machines_dns_add
  • machines_dns_list
All 70 tools →
release cadence · 90d 53 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
0.2.39 2026-08-27 npm
0.2.38 2026-08-26 npm
0.2.37 2026-08-25 npm
0.2.36 2026-08-25 npm
0.2.35 2026-08-22 npm
0.2.34 2026-08-21 npm
0.2.29 2026-08-19 npm
0.2.28 2026-08-19 npm
0.2.27 2026-08-15 npm
0.2.26 2026-08-15 npm

view all →