pypi Python analyzed 0.1.7

12306-mcp

v0.1.7
pypi

Add your description here

maintainer
license
first seen
2026-05-25
last seen
2026-08-01
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in 12306-mcp
capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals pypi-sdist
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.1.7 · analyzer v28 · 3d ago

danger signals1

  • committed secret committed .env 12306_mcp-0.1.7/.env :1 env file shipped with populated values
code evidence v0.1.7 · pypi-sdist
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4

network 2

  • net 12306_mcp-0.1.7/src/mcp_12306/main_12306.py :1 import requests
  • net 12306_mcp-0.1.7/src/mcp_12306/server.py :10 import requests

declared dependencies 5

  • mcp@>=1.0.0
  • pydantic@>=2.0.0
  • tzdata@>=2024.2
  • requests@>=2.32.3
  • aiohttp@>=3.11.18