npm JavaScript analyzed 0.17.0

@hasna/todos

v0.17.0
npm

Universal task management for AI coding agents - CLI + MCP server + interactive TUI

maintainer
andreihasna2
licence
Apache-2.0
first seen
2026-07-28
last seen
2026-09-18
releases · 30d
9
short id

@hasna/todos is an MCP server distributed on npm, maintained by andreihasna2, tracked here since July 2026. It has shipped 264 releases (currently 0.17.0) and exposes 12 tools. Tools include cancel_dispatch, create_task, delete_task, dispatch_task_list, dispatch_tasks, dispatch_to_multiple, and 6 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 12 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-18: 59 tools removed.

full security breakdown →
tools 12
  • cancel_dispatch
  • create_task
  • delete_task
  • dispatch_task_list
  • dispatch_tasks
  • dispatch_to_multiple
  • get_task
  • list_dispatches
  • list_tasks
  • run_due_dispatches
  • update_task
  • upsert_task
release cadence · 90d 88 releases
06-21 00:00 08-04 00:00 now
recent releases last 10
version date src
0.17.0 2026-09-18 npm
0.16.0 2026-09-10 npm
0.15.52 2026-09-03 npm
0.15.51 2026-08-29 npm
0.15.50 2026-08-25 npm
0.15.49 2026-08-25 npm
0.15.47 2026-08-23 npm
0.15.46 2026-08-22 npm
0.15.41 2026-08-22 npm
0.15.35 2026-08-17 npm

view all →