MCP Observatory
3m ago Tracked 59,936 Last 3m ago 24h 2,437
npm JavaScript analyzed 0.2.98

docdex

v0.2.98
npm

Local-first documentation and code indexer with HTTP/MCP search, AST, and agent memory.

maintainer
bekirdag
licence
MIT
first seen
2026-08-11
last seen
2026-08-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.2.98 · analyzer v33 · 4w ago

skills & prompt files 1

code evidence v0.2.98 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 16

filesystem 8

  • fs package/bin/docdex.js :4 const fs = require("node:fs");
  • fs package/lib/cli_entry.js :4 const fs = require("node:fs");
  • fs package/lib/daemon_version.js :3 const fs = require("node:fs");
  • fs package/lib/install.js :4 const fs = require("node:fs");
  • fs package/lib/paths.js :3 const fs = require("node:fs");
  • fs package/lib/platform.js :3 const fs = require("node:fs");
  • fs package/lib/postinstall_setup.js :4 const fs = require("node:fs");
  • fs package/lib/uninstall.js :4 const fs = require("node:fs");

shell / exec 6

  • shell package/bin/docdex.js :6 const { spawn } = require("node:child_process");
  • shell package/lib/cli_entry.js :6 const { spawn } = require("node:child_process");
  • shell package/lib/daemon_version.js :4 const { execFile } = require("node:child_process");
  • shell package/lib/install.js :11 const { spawn, spawnSync } = require("node:child_process");
  • shell package/lib/postinstall_setup.js :11 const { spawn, spawnSync } = require("node:child_process");
  • shell package/lib/uninstall.js :8 const { spawnSync } = require("node:child_process");

network 5

  • net package/lib/install.js :5 const http = require("node:http");
  • net package/lib/mcp_stdio_bridge.js :3 const http = require("node:http");
  • net package/lib/postinstall_setup.js :5 const net = require("node:net");
  • net package/lib/uninstall.js :5 const net = require("node:net");
  • net package/lib/update_check.js :3 const https = require("node:https");

secrets 1

  • secrets package/lib/install.js :230 const token = process.env.DOCDEX_GITHUB_TOKEN || process.env.GITHUB_TOKEN;

install hooks 1

  • postinstall package/package.json :20 node ./lib/install.js

declared dependencies 1

  • tar@^7.5.19