npm analyzed 1.0.24

borgmcp

v1.0.24
npm

Coordinate AI coding agents in shared cubes. Works with Claude Code and Codex. Create projects, assign roles, and share a live activity log.

maintainer
byteventures
license
SEE LICENSE IN LICENSE
first seen
2026-06-08
last seen
2026-06-14
releases · 30d
91
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidencev1.0.24 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

shell / exec 8

  • shell package/dist/assimilate-deps.js :1 import{spawnSync as m,spawn as l}from"node:child_process";import{existsSync as f,mkdirSync as b}from"node:fs";import{hostname as h,homedir as C}from"node:os";import{createInterface as d}from"node:read
  • shell package/dist/claude.js :2 import{spawn as R}from"child_process";import{randomUUID as D}from"node:crypto";import{basename as L}from"node:path";import{createInterface as E}from"node:readline/promises";import t from"chalk";import
  • shell package/dist/codex-remote.js :1 import{mkdirSync as v,chmodSync as w,readdirSync as g,rmSync as C,writeFileSync as k,readFileSync as y}from"node:fs";import{homedir as S}from"node:os";import{join as u}from"node:path";import{randomByt
  • shell package/dist/config-utils.js :1 import{execSync as u}from"child_process";import n from"fs";import d from"os";import i from"path";import{fileURLToPath as O}from"url";import{dirname as C}from"path";const b=O(import.meta.url),R=C(b),c=
  • shell package/dist/inbox-monitor.js :2 import{spawn as w}from"node:child_process";import{randomBytes as y}from"node:crypto";import{linkSync as T,readFileSync as p,realpathSync as v,statSync as k,unlinkSync as d,writeFileSync as I}from"node
  • shell package/dist/launch-all-deps.js :1 import{spawnSync as o}from"node:child_process";import{existsSync as n,mkdirSync as s,readFileSync as c,writeFileSync as u,unlinkSync as a,statSync as d,readdirSync as l}from"node:fs";import{homedir as
  • shell package/dist/stream-status.js :1 import{spawnSync as p}from"node:child_process";import{statSync as m}from"node:fs";import{heartbeatPathFor as d,HEARTBEAT_STALE_MS as f}from"./inbox-monitor.js";function y(n){if(!n)return null;try{cons
  • shell package/dist/sync.js :1 import{spawnSync as y}from"node:child_process";import{basename as p}from"node:path";import o from"chalk";import{adoptWorktree as b,syncWorktree as k,cleanupMerged as v,isMerged as A,perWorktreeBranchN

network 4

  • net package/dist/auth.js :23 `),o.close(),i(new Error("Missing authorization code"))}});o.listen(e,()=>{r(`Callback server listening on http://localhost:${e}`)}),setTimeout(()=>{o.close(),i(new Error(`Authentication timed out aft
  • net package/dist/device-auth.js :1 const u="https://oauth2.googleapis.com/device/code",p="https://oauth2.googleapis.com/token",w="urn:ietf:params:oauth:grant-type:device_code",h=5,f=5;class n extends Error{code;constructor(o,i){super(i
  • net package/dist/remote-client.js :1 import{getIdToken as f,getRefreshToken as w,clearTokens as m}from"./config.js";import{refreshIdToken as j,RefreshTokenInvalidError as g,RefreshTransientError as T}from"./auth.js";import{consolePrefix
  • net package/dist/stale-version-check.js :1 const a="https://registry.npmjs.org/borgmcp/latest",i=2e3,c=1;function u(t,e){const r=o(t),n=o(e);if(!r||!n)return{stale:!1,message:null};if(r.major!==n.major)return{stale:!1,message:null};const s=n.m

secrets 1

  • secrets package/dist/config.js :1 import o from"os";import m from"path";import{promises as r}from"fs";import{isKeyringAvailable as w}from"./auth-env.js";import{deriveMachineKey as p}from"./token-crypto.js";import{makeKeychainBackend a

install hooks 1

  • postinstall package/package.json :22 node dist/postinstall.js || true

declared dependencies 12

  • @modelcontextprotocol/sdk@^1.0.4
  • @napi-rs/keyring@^1.3.0
  • chalk@^5.3.0
  • open@^10.0.0
  • prompts@^2.4.2
  • which@^4.0.0
  • @types/node@^22.10.2
  • @types/prompts@^2.4.9
  • @types/which@^3.0.4
  • esbuild@^0.27.7
  • typescript@^6.0.3
  • vitest@^3.2.4