npm analyzed 1.6.0

ihor-sokoliuk/mcp-searxng

v1.6.0

npm

MCP server for SearXNG integration

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 2 tools

transport stdio · streamable-http · http counts 2 tools · 0 res · 0 prompts permission surface via code analysis

code evidence v1.6.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs ihor-sokoliuk-mcp-searxng-90423e5/scripts/update-version.js :3 import fs from 'fs';
fs ihor-sokoliuk-mcp-searxng-90423e5/src/tls-config.ts :1 import { existsSync, readFileSync } from "node:fs";

net ihor-sokoliuk-mcp-searxng-90423e5/src/instance-info.ts :179 const response = await fetch(url.toString(), requestOptions);
net ihor-sokoliuk-mcp-searxng-90423e5/src/proxy.ts :1 import { Agent, ProxyAgent } from "undici";
net ihor-sokoliuk-mcp-searxng-90423e5/src/search.ts :398 response = await fetch(url.toString(), {
net ihor-sokoliuk-mcp-searxng-90423e5/src/suggestions.ts :32 const response = await fetch(url.toString(), requestOptions);
net ihor-sokoliuk-mcp-searxng-90423e5/src/url-reader.ts :2 import { isIP } from "node:net";

secrets ihor-sokoliuk-mcp-searxng-90423e5/src/error-handler.ts :175 const authPassword = process.env.AUTH_PASSWORD;
secrets ihor-sokoliuk-mcp-searxng-90423e5/src/http-security.ts :26 const authToken = process.env.MCP_HTTP_AUTH_TOKEN;
secrets ihor-sokoliuk-mcp-searxng-90423e5/src/resources.ts :19 hasAuth: !!(process.env.AUTH_USERNAME && process.env.AUTH_PASSWORD),
secrets ihor-sokoliuk-mcp-searxng-90423e5/src/search.ts :371 const password = process.env.AUTH_PASSWORD;