npm JavaScript analyzed 12.14.15 deep scan · partial (177/2,127 files)

@juspay/neurolink

v12.14.15
npm

TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and mo

maintainer
balaganesh_juspay
licence
MIT
first seen
2026-05-22
last seen
2026-09-17
releases · 30d
342
short id

@juspay/neurolink is an MCP server distributed on npm, maintained by balaganesh_juspay, tracked here since May 2026. It has shipped 1170 releases (currently 12.14.15) and exposes 2 tools. Tools include hello, retrieve_context. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 2 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-17: 1 tool added.

full security breakdown →
tools 2
  • hello
  • retrieve_context
release cadence · 90d 656 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
12.14.15 2026-09-17 npm
v12.14.15 2026-09-17 github
12.14.14 2026-09-17 npm
v12.14.14 2026-09-17 github
12.14.13 2026-09-17 npm
v12.14.13 2026-09-17 github
12.14.12 2026-09-17 npm
v12.14.12 2026-09-17 github
12.14.11 2026-09-16 npm
v12.14.11 2026-09-16 github

view all →