npm JavaScript analyzed 0.64.1 unconfirmed MCP

experimental-ash

v0.64.1
npm

Filesystem-first framework for durable backend AI agents that run anywhere.

maintainer
matheuss
licence
Apache-2.0
first seen
2026-06-04
last seen
2026-09-15
releases · 30d
0
short id

experimental-ash is an MCP server distributed on npm, maintained by matheuss, tracked here since June 2026. It has shipped 224 releases (currently 0.64.1). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 0 releases

No releases yet.

recent releases last 10
version date src
0.64.1 2026-06-05 npm
0.64.0 2026-06-05 npm
0.63.0 2026-06-05 npm
0.62.0 2026-06-05 npm
0.61.0 2026-06-05 npm
0.60.0 2026-06-05 npm
0.59.0 2026-06-05 npm
0.58.1 2026-06-04 npm
0.58.0 2026-06-04 npm
0.57.0 2026-06-04 npm

view all →