npm analyzed 3.4.3

supergateway

v3.4.3
npm

Run MCP stdio servers over SSE, Streamable HTTP or visa versa

maintainer
nedomas
license
first seen
2026-05-22
last seen
2026-06-17
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · streamable-http · http · sse counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v3.4.3 · analyzer v18 · 9h ago

skills & prompt files 1

code evidence v3.4.3 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 2

  • fs package/dist/lib/getVersion.js :3 import { readFileSync } from 'fs';
  • fs package/src/lib/getVersion.ts :3 import { readFileSync } from 'fs'

shell / exec 8

  • shell package/dist/gateways/stdioToSse.js :4 import { spawn } from 'child_process';
  • shell package/dist/gateways/stdioToStatefulStreamableHttp.js :3 import { spawn } from 'child_process';
  • shell package/dist/gateways/stdioToStatelessStreamableHttp.js :3 import { spawn } from 'child_process';
  • shell package/dist/gateways/stdioToWs.js :4 import { spawn } from 'child_process';
  • shell package/src/gateways/stdioToSse.ts :4 import { spawn, ChildProcessWithoutNullStreams } from 'child_process'
  • shell package/src/gateways/stdioToStatefulStreamableHttp.ts :3 import { spawn } from 'child_process'
  • shell package/src/gateways/stdioToStatelessStreamableHttp.ts :3 import { spawn } from 'child_process'
  • shell package/src/gateways/stdioToWs.ts :4 import { spawn, ChildProcessWithoutNullStreams } from 'child_process'

network 5

  • net package/dist/gateways/sseToStdio.js :39 return fetch(url, { ...init, headers: { ...init.headers, ...headers } });
  • net package/dist/gateways/stdioToWs.js :3 import { createServer } from 'http';
  • net package/src/gateways/sseToStdio.ts :75 return fetch(url, { ...init, headers: { ...init.headers, ...headers } })
  • net package/src/gateways/stdioToWs.ts :3 import { createServer } from 'http'
  • net package/src/server/websocket.ts :8 import { Server } from 'http'

declared dependencies 21

  • @modelcontextprotocol/sdk@^1.18.2
  • body-parser@^1.20.3
  • cors@^2.8.5
  • express@^4.21.2
  • uuid@^11.1.0
  • ws@^8.18.2
  • yargs@^17.7.2
  • zod@^3.24.4
  • @types/body-parser@^1.19.5
  • prev-modelcontextprotocol-sdk@npm:@modelcontextprotocol/sdk@1.4.0
  • @types/cors@^2.8.18
  • @types/express@^5.0.2
  • @types/node@^22.15.18
  • @types/ws@^8.18.1
  • @types/yargs@^17.0.33
  • husky@^9.1.7
  • lint-staged@^16.0.0
  • prettier@^3.5.3
  • ts-node@^10.9.2
  • tsx@^4.19.4
  • typescript@^5.8.3