npm JavaScript analyzed 2.0.0

@modelcontextprotocol/client

v2.0.0

npm

Model Context Protocol implementation for TypeScript - Client package

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport — counts 1 tools · 0 res · 0 prompts permission surface via README inference

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v2.0.0 · analyzer v33 · 4w ago

dynamic code execution new Function() package/dist/ajvProvider-1b6pVpkg.cjs :2594 const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get());
dynamic code execution new Function() package/dist/ajvProvider-97rDpkRx.mjs :2594 const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get());

code evidence v2.0.0 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 46

shell package/dist/stdio.mjs :68 this._process = spawn(this._serverParams.command, this._serverParams.args ?? [], {

net package/dist/index.cjs :925 * However, `fetch()` also throws `TypeError` for non-CORS failures (DNS resolution, connection
net package/dist/index.mjs :922 * However, `fetch()` also throws `TypeError` for non-CORS failures (DNS resolution, connection
net package/dist/shimsBrowser.cjs :5 * Whether `fetch()` may throw `TypeError` due to CORS. Only true in browser contexts
net package/dist/shimsBrowser.mjs :5 * Whether `fetch()` may throw `TypeError` due to CORS. Only true in browser contexts
net package/dist/shimsNode.cjs :5 * Whether `fetch()` may throw `TypeError` due to CORS. CORS is a browser-only concept —
net package/dist/shimsNode.mjs :5 * Whether `fetch()` may throw `TypeError` due to CORS. CORS is a browser-only concept —
net package/dist/shimsWorkerd.cjs :12 * Whether `fetch()` may throw `TypeError` due to CORS. CORS is a browser-only concept —
net package/dist/shimsWorkerd.mjs :12 * Whether `fetch()` may throw `TypeError` due to CORS. CORS is a browser-only concept —

show 16 more