npm JavaScript analyzed 2.0.0

@modelcontextprotocol/client

v2.0.0
npm

Model Context Protocol implementation for TypeScript - Client package

maintainer
fweinberger
licence
MIT
first seen
2026-06-09
last seen
2026-09-17
releases · 30d
0
short id

@modelcontextprotocol/client is an MCP server distributed on npm, maintained by fweinberger, tracked here since June 2026. It has shipped 10 releases (currently 2.0.0) and exposes 1 tool. Tools include greet. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Since the previous scan on 2026-08-15: 1 tool removed.

full security breakdown →
tools 1
  • greet
release cadence · 90d 8 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
2.0.0 2026-07-27 npm
2.0.0-beta.5 2026-07-21 npm
2.0.0-beta.4 2026-07-13 npm
2.0.0-beta.3 2026-07-09 npm
2.0.0-beta.2 2026-07-02 npm
2.0.0-beta.1 2026-06-30 npm
2.0.0-alpha.4 2026-06-30 npm
2.0.0-alpha.3 2026-06-25 npm
2.0.0-alpha.2 2026-04-01 npm
2.0.0-alpha.1 2026-04-01 npm

view all →