Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-26 21:38 UTC

redocly-contrib / mcp-typescript-sdk

The official TypeScript SDK for Model Context Protocol servers and clients

TypeScriptMIT★ 0 зірок⑂ 2 форкиз вер. 2025 р.форкПереглянути на GitHub ↗

redocly-contrib/mcp-typescript-sdk має індекс здоров’я 39 зі 100, що відповідає смузі «У зоні ризику». Найвищий показник — AI Readiness (81/100), найнижчий — Vitality (14/100). Останнє оновлення було 311 днів тому. Більшість нещодавньої роботи виконують 2 учасники.

39
загалом / 100
У зоні ризику

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

39
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

redocly-contribОрганізація
0 підписників9 публічних репозиторіївз квіт. 2020 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
npm@redocly/mcp-typescript-sdk1.18.1220 2071310 днів томуmodelcontextprotocolmcp

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

14Критичний · 22% загального індексу
Як обчислюється оцінка
3.6/36Свіжість push — останній push 311 дн. тому
5.5/36Ритм комітів — 8/52 тижнів із комітами
13.5/18Обсяг комітів — 31 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Використані вхідні дані
commits_last_year31
human_commit_share0,99
days_since_last_push311
active_weeks_last_year8
Як обчислюється оцінка
0/27Випускає релізи — релізів не опубліковано
0/36Свіжість релізів — релізів немає
0/27Ритм релізів — релізів немає
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count0
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

31У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 0 зірок
0/25Форки — 2 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks2
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
0/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeні
has_licenseні
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні
Як обчислюється оцінка
71.2/80Щомісячні завантаження — 220 207 завантажень/місяць у npm
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packages@redocly/mcp-typescript-sdk
dependents
ecosystemsnpm
total_downloads
monthly_downloads220 207
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

58Помірний · 24% загального індексу
Як обчислюється оцінка
25.2/54Бас-фактор — на 2 контриб’ютор(ів) припадає половина всіх комітів
15.3/22.5Розподіл комітів — головний контриб’ютор — автор 32% комітів
13.5/13.5Широта контриб’юторів — 99 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 53 contributing companies or organizations
Використані вхідні дані
bus_factor2
contributors_sampled99
top_contributor_share0,319
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
25.5/38.3Прийняття PR — злито 2/3 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 2/26 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs2
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs1
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue. Залишкові ваги перенормовано.

Власність та опіка

49У зоні ризику
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
0/25Охоплення власника — 0 підписників у redocly-contrib
19.3/25Послужний список — 9 публічних репозиторіїв, вік облікового запису ~6 р.
Використані вхідні дані
followers0
owner_typeOrganization
is_verified
owner_loginredocly-contrib
public_repos9
account_age_days2 293
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у npm
26/35Свіжість публікацій — остання публікація 310 дн. тому
4/20Історія версій — 1 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packages@redocly/mcp-typescript-sdk
ecosystemsnpm
any_deprecatedні
min_days_since_publish310

Інженерна якість

Чи наявні базові інженерні практики та документація?

44У зоні ризику · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 1 процес(ів) CI
24/24Наявні тести
16/16Конфігурація лінтера — eslint.config.mjs
0/9.6Pre-commit-хуки
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configтак
has_precommit_configні

Документація

15Критичний
Як обчислюється оцінка
0/30README
0/25Каталог документації
15/15Сайт документації / домашня сторінка — https://modelcontextprotocol.io
0/10Опис репозиторію
0/10Теми
0/10Wiki
Використані вхідні дані
topics
has_wikiні
homepagehttps://modelcontextprotocol.io
has_readmeні
has_docs_dirні
has_descriptionні

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

45У зоні ризику · 16% загального індексу

Стан безпеки

31У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 2/26 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 53 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — немає даних
1.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 23 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate3,1
Виключено з оцінювання (немає даних або не застосовно): packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages18
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей npm:@redocly/mcp-typescript-sdk@1.18.1 — тим, що тягне за собою встановлення опублікованого пакета, — 18 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

81Добрий · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — CLAUDE.md
0/15Машиночитана документація (llms.txt)
36.6/40Читабельна історія комітів — намір зазначено у 68 з 99 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,687
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes1 115
Як обчислюється оцінка
0/18Розгортання однією командою
22/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — eslint.config.mjs
11/11Статична перевірка типів — tsconfig.json
10/10Відтворюване середовище — lockfile
10/10Підтверджена практика роботи з агентами — 10 з останніх 100 комітів створено агентом або з його зазначенням
8/8Автоматизоване супроводження — 1 з останніх 100 комітів — автоматичні оновлення залежностей
3/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
Використані вхідні дані
has_nixні
has_testsтак
lockfilespackage-lock.json
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configтак
typecheck_configstsconfig.json
agent_commit_share0,1
toolchain_manifests
dependency_bot_commit_share0,01
Як обчислюється оцінка
45/45Типізований код — TypeScript (статично типізована)
51.8/55Керовані розміри файлів — 2/34 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageTypeScript
largest_source_bytes110 124
source_files_sampled34
oversized_source_files2

Ключові факти

0зірок GitHub
99контриб'юторів
31комітів за останні 12 місяців
311днів від останнього пушу
0релізів
2бас-фактор
0відкритих issue
npmпакетних екосистем

Попередження щодо збору даних

  • Community profile unavailable
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Докладніше

Історія зірок і форків 0 ★ / 2 ⇿
0Зірки
2Форки

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

111222212026-062026-062026-06
OpenSSF Scorecard 3.1 / 10
3.1сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-26 21:37 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
0CI-Tests0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 2/26 approved changesets -- score normalized to 0
10Contributorsproject has 53 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
н/дPackagingpackaging workflow not detected
3Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 3
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities23 existing vulnerabilities detected
Прямі залежності 4
РеєстрПакетОбмеження версіїМаніфест
npm@redocly/ajv8.11.3package.json
npmcontent-type^1.0.5package.json
npmraw-body^3.0.0package.json
npmzod^3.23.8package.json
Усі залежності не зібрано

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Сповіщення про залежності 0

Встановлення npm:@redocly/mcp-typescript-sdk@1.18.1 тягне 18 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 1827,
      "has_wiki": false,
      "homepage": "https://modelcontextprotocol.io",
      "languages": {
        "JavaScript": 1065,
        "TypeScript": 510987
      },
      "pushed_at": "2025-09-18T17:30:32Z",
      "created_at": "2025-09-16T12:49:35Z",
      "owner_type": "Organization",
      "updated_at": "2025-09-18T17:30:36Z",
      "description": "The official TypeScript SDK for Model Context Protocol servers and clients",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "Organization",
      "login": "redocly-contrib",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/63715377?v=4",
      "created_at": "2020-04-15T10:15:14Z",
      "is_verified": null,
      "public_repos": 9,
      "account_age_days": 2293
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [],
      "recent_commits": [
        {
          "oid": "d165e6a071f828c180d03fe1d743d0de3d4e4273",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove cjs",
          "author_name": "Yevhen Smoliy",
          "author_login": null,
          "committed_at": "2025-09-18T17:30:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b308a0e62333cee777ddcc8bcea72add00ac404",
          "body": "…ool-schema\n\nfeat: instead of zod using ajv schema for tool",
          "is_bot": false,
          "headline": "Merge pull request #2 from redocly-contrib/feat/mcp-server-with-ajv-t…",
          "author_name": "Yevhen Smoliy",
          "author_login": "SmoliyY",
          "committed_at": "2025-09-18T17:28:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0452d835531ea0b1c72be61b559e6ce37dec20f3",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove zod to json",
          "author_name": "Yevhen Smoliy",
          "author_login": null,
          "committed_at": "2025-09-18T17:27:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dca4a3bbde66babf1f37ff91c19a42f9395e6c2c",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove comment",
          "author_name": "Yevhen Smoliy",
          "author_login": null,
          "committed_at": "2025-09-18T13:49:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "162fcb7798ee2523f023ab2c5381b06a19a4e1c6",
          "body": null,
          "is_bot": false,
          "headline": "feat: instead of zod using ajv schema for tool",
          "author_name": "Yevhen Smoliy",
          "author_login": null,
          "committed_at": "2025-09-18T13:46:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a55f24dbc143eeff3e8f174fb8682480d87f17c",
          "body": "…t-sdk\n\nfeat: redocly mcp typescript sdk fork",
          "is_bot": false,
          "headline": "Merge pull request #1 from redocly-contrib/feat/redocly-mcp-typescrip…",
          "author_name": "Yevhen Smoliy",
          "author_login": "SmoliyY",
          "committed_at": "2025-09-17T09:14:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "656b431769ac70df58913beeab6b36f706b362e1",
          "body": null,
          "is_bot": false,
          "headline": "feat: redocly mcp typescript sdk fork",
          "author_name": "Yevhen Smoliy",
          "author_login": null,
          "committed_at": "2025-09-16T13:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b28c297184cb0cb64611a3357d6438dd1b0824c6",
          "body": null,
          "is_bot": false,
          "headline": "ignore icons for now (#938)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-09-11T19:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "835286894c0cd80c5cd6580e8096a40ce2f28755",
          "body": null,
          "is_bot": false,
          "headline": "1.18.0 (#937)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-09-11T17:40:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68baf63583df8b7e2dab835a15c9cf81e285c174",
          "body": null,
          "is_bot": false,
          "headline": "1.17.6 (#936)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-09-11T17:38:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebf39330f3a90fe9e74512788c11533a9be720e1",
          "body": null,
          "is_bot": false,
          "headline": "Fix automatic log level handling for sessionless connections (#917)",
          "author_name": "Cliff Hall",
          "author_login": "cliffhall",
          "committed_at": "2025-09-09T20:35:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dd7a2b700bb286e1d479befefff4635f02d5a6a",
          "body": "Co-authored-by: David Soria Parra <167242713+dsp-ant@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat: add _meta field support to tool definitions (#922)",
          "author_name": "Khanh Nguyen",
          "author_login": "knguyen-figma",
          "committed_at": "2025-09-09T13:39:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4de54fed0c6b85217da98e10dacf62696a4bbad4",
          "body": null,
          "is_bot": false,
          "headline": "Add the checkIcon test, so that tests aren't failing anymore",
          "author_name": "David Soria Parra",
          "author_login": "dsp-ant",
          "committed_at": "2025-09-09T13:30:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "217756edf7b0f0c9dd796857e56b994ff4cb090d",
          "body": "Co-authored-by: David Soria Parra <167242713+dsp-ant@users.noreply.github.com>",
          "is_bot": false,
          "headline": "mcp: update SDK for SEP 973 + add to example server (#904)",
          "author_name": "Jesse Lumarie",
          "author_login": "jesselumarie",
          "committed_at": "2025-09-09T11:21:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf817939917277a4c59f2e19e7b44b8dd7ff140c",
          "body": null,
          "is_bot": false,
          "headline": "bump version (#913)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-09-02T15:46:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dd074f8a25b92994e0e8cc69d3ffe9112a1f32b",
          "body": null,
          "is_bot": false,
          "headline": "Fix the SDK vs Spec types test that is breaking CI (#908)",
          "author_name": "Cliff Hall",
          "author_login": "cliffhall",
          "committed_at": "2025-08-29T18:03:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79d11dc53fda1dffcbfdad101d9832227134bf7c",
          "body": "Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Automatic handling of logging level  (#882)",
          "author_name": "Cliff Hall",
          "author_login": "cliffhall",
          "committed_at": "2025-08-27T19:09:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bc2235d747c320dfa0b6227cc84414c6d0add89",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 1.17.4 (#894)",
          "author_name": "Felix Weinberger",
          "author_login": "felixweinberger",
          "committed_at": "2025-08-21T16:08:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f5950be01927cb8e4e555cb5584c44db1604f39",
          "body": "…4 (#879)\n\nCo-authored-by: adam jones <domdomegg+git@gmail.com>",
          "is_bot": false,
          "headline": "[auth] OAuth protected-resource-metadata: fallback on 4xx not just 40…",
          "author_name": "Paul Carleton",
          "author_login": "pcarleton",
          "committed_at": "2025-08-19T14:43:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64f7cdd09bf99031510b52a1e957e40febea997b",
          "body": "Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "restrict url schemes allowed in oauth metadata (#877)",
          "author_name": "Paul Carleton",
          "author_login": "pcarleton",
          "committed_at": "2025-08-19T14:39:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "abb2f0aa14f94f61be2e1f72711aa35284068f5b",
          "body": "…utting concerns  (#485)\n\nCo-authored-by: David Soria Parra <davidsp@anthropic.com>\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feature(middleware): Composable fetch middleware for auth and cross‑c…",
          "author_name": "Marcelo Paternostro",
          "author_login": "m-paternostro",
          "committed_at": "2025-08-18T13:11:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4a63974049e27efb3c99325b29454127eed33adf",
          "body": null,
          "is_bot": false,
          "headline": "version: patch to 0.17.3 (#878)",
          "author_name": "Felix Weinberger",
          "author_login": "felixweinberger",
          "committed_at": "2025-08-14T14:55:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65119eb7d879e1a429717e887b279749359d7ec2",
          "body": "…#789)",
          "is_bot": false,
          "headline": "docs: correct parameter schema key in Dynamic Servers documentation (…",
          "author_name": "bianbianzhu",
          "author_login": "bianbianzhu",
          "committed_at": "2025-08-14T14:10:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aad33a15a8cc37a0e54a4d3fe71550588ae2df80",
          "body": "…… (#850)",
          "is_bot": false,
          "headline": "fix: pass fetchfn parameter to registerClient and refreshAuthorizatio…",
          "author_name": "Arjun Kumar",
          "author_login": "arjunkmrm",
          "committed_at": "2025-08-14T14:06:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69d4eb1227eaf8b60c9ea563657c8f2031acbdbe",
          "body": null,
          "is_bot": false,
          "headline": "fix: client import & server imports (#851)",
          "author_name": "Jatin Sandilya",
          "author_login": "jatinsandilya",
          "committed_at": "2025-08-12T15:51:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d0977bc9169965233120e823c8024e210132ad9",
          "body": null,
          "is_bot": false,
          "headline": "Fix quit command in Example client with OAuth (#864)",
          "author_name": "Dale Seo",
          "author_login": "DaleSeo",
          "committed_at": "2025-08-11T18:23:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1608a6513d18eb965266286904760f830de96fe",
          "body": null,
          "is_bot": false,
          "headline": "1.17.2 (#855)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-08-07T20:28:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f657ead4722cfb419d857965a59bd52164c9c99a",
          "body": "…#827)",
          "is_bot": false,
          "headline": "fix: retry next endpoint on CORS error during auth server discovery (…",
          "author_name": "Xiao Yijun",
          "author_login": "xiaoyijun",
          "committed_at": "2025-08-04T14:43:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0551cc52b8920d7da46a4519b42f335a0a852b6c",
          "body": null,
          "is_bot": false,
          "headline": "1.17.1 (#831)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-31T18:33:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31acdcbb189056ec83d14a4f7a37ae2b1c67680e",
          "body": "…ports connect (#820)",
          "is_bot": false,
          "headline": "fix: prevent responses being sent to wrong client when multiple trans…",
          "author_name": "Grimmer Kang",
          "author_login": "grimmerk",
          "committed_at": "2025-07-29T13:07:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee16173865f0a2cf084ac75929f9bbbce3148389",
          "body": "…eaves type (#784)",
          "is_bot": false,
          "headline": "(fix): Update fallbackRequestHandler type to match _requestHandlers l…",
          "author_name": "Frédéric Barthelet",
          "author_login": "fredericbarthelet",
          "committed_at": "2025-07-29T13:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "222db4a9c1ab4f023dc1dd1687212bddd522f48e",
          "body": null,
          "is_bot": false,
          "headline": "Bump version 1.17.0 (#810)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-24T17:15:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8ec6653eb1e0a177106debc1349ae1d986c1494",
          "body": "… directory (#798)\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-24T17:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fc452ea0ef355429af06654cc3ea36a903935b8",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove extraneous code block in README.md (#791)",
          "author_name": "Theresa",
          "author_login": "sd0ric4",
          "committed_at": "2025-07-24T16:50:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb7cccc3ba1b23ab911962a3b314d13c1db88d90",
          "body": "Co-authored-by: Paul Carleton <paulc@anthropic.com>\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: support oidc discovery in client sdk (#652)",
          "author_name": "Xiao Yijun",
          "author_login": "xiaoyijun",
          "committed_at": "2025-07-24T13:11:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "62c608d8cef50de5b78a99b8db554f6dbc4b0b77",
          "body": "…en (#801)",
          "is_bot": false,
          "headline": "fix: Explicitly declare accpet type to json when exchanging oauth tok…",
          "author_name": "Jonathan Wang",
          "author_login": "JoJoJoJoJoJoJo",
          "committed_at": "2025-07-24T12:50:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83168250f56bd4c5582bc7d075746f8f90ac2de4",
          "body": null,
          "is_bot": false,
          "headline": "Fix indent (#807)",
          "author_name": "Mason Chen",
          "author_login": "jiec-msft",
          "committed_at": "2025-07-24T12:49:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e15edca0af05e7eaeb38e0880669a16f749e0f5",
          "body": null,
          "is_bot": false,
          "headline": "update codeowners (#803)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-23T18:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7887c082cb55ddc55d77523df88654ec4120dbf",
          "body": null,
          "is_bot": false,
          "headline": "Add more robust base64 check (#786)",
          "author_name": "Cliff Hall",
          "author_login": "cliffhall",
          "committed_at": "2025-07-21T08:57:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d545176f9ba852c97a18a40037abff40cd086c2",
          "body": null,
          "is_bot": false,
          "headline": "Add CODEOWNERS file for dsk (#781)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-18T13:11:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "400b020c854d31112c8f29a2e280072731ed3d5f",
          "body": null,
          "is_bot": false,
          "headline": "1.16.0 (#779)",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-17T19:18:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2db0dbebe7c0ff6af5ca392c25032841aa48e06e",
          "body": null,
          "is_bot": false,
          "headline": "fix client id issuance date should only be sent when generated (#775)",
          "author_name": "Christian Daguerre",
          "author_login": "cdaguerre",
          "committed_at": "2025-07-17T17:51:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d2a0aeb7b9be46cef91c0c9140594128b59e956",
          "body": null,
          "is_bot": false,
          "headline": "fix: consistently use consumer-provided fetch function (#767)",
          "author_name": "Luca Chang",
          "author_login": "LucaButBoring",
          "committed_at": "2025-07-17T16:57:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16ea27783cc534f629ad548ccaa8a1af16832763",
          "body": "…umable Streams (#732)",
          "is_bot": false,
          "headline": "fix(731): StreamableHTTPClientTransport Fails to Reconnect on Non-Res…",
          "author_name": "Jesse",
          "author_login": "jneums",
          "committed_at": "2025-07-15T16:43:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af61a086ae4346a844e4359679404e42361e724d",
          "body": "…(#746)",
          "is_bot": false,
          "headline": "feat(protocol): Debounce notifications to improve network efficiancy …",
          "author_name": "Jesse",
          "author_login": "jneums",
          "committed_at": "2025-07-15T08:40:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3584f2a4162febadf39300d7f37be63a91ce05d",
          "body": "…763)",
          "is_bot": false,
          "headline": "fix: use authorization_server_url as issuer when fetching metadata (#…",
          "author_name": "Jonathan Wang",
          "author_login": "JoJoJoJoJoJoJo",
          "committed_at": "2025-07-14T16:24:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b2ad0385dc4fa65caa6d6dc6d81bf0bdb031cdb",
          "body": "Co-authored-by: Paul Carleton <paulc@anthropic.com>",
          "is_bot": false,
          "headline": "Adding `invalidateCredentials()` to `OAuthClientProvider` (#570)",
          "author_name": "Glen Maddern",
          "author_login": "geelen",
          "committed_at": "2025-07-14T16:11:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc9ea7fd21db206352bbb7d619cf0f66b536945d",
          "body": "…r (#734)",
          "is_bot": false,
          "headline": "make client side client_id generation configurable in the oauth route…",
          "author_name": "Christian Daguerre",
          "author_login": "cdaguerre",
          "committed_at": "2025-07-14T16:07:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "117781453c16dd1afba80b11d43e938614bee957",
          "body": null,
          "is_bot": false,
          "headline": "Non-critical: Readme syntax and typographical error fixes (#765)",
          "author_name": "Nitin Bansal",
          "author_login": "freakynit",
          "committed_at": "2025-07-14T15:41:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9c907dd700a5c4b977624ac47fd8cc24c6bd473",
          "body": null,
          "is_bot": false,
          "headline": "Add prompt=consent for OIDC offline_access scope (#681)",
          "author_name": "Daniel Kelleher",
          "author_login": "dankelleher",
          "committed_at": "2025-07-14T13:47:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b99c24bda03b4f051b244e4242cfffb14cea9e6",
          "body": null,
          "is_bot": false,
          "headline": "Add OIDC ID token support (#680)",
          "author_name": "Daniel Kelleher",
          "author_login": "dankelleher",
          "committed_at": "2025-07-14T12:22:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b536abf1bce4ff0dfba8e80eb9d8f47c51d79ba",
          "body": "…ests\n\nAdd type compatibility test between SDK and spec types",
          "is_bot": false,
          "headline": "Merge pull request #729 from modelcontextprotocol/ochafik/spec-type-t…",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-14T07:38:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cce168c76f54c28a40d2531259ccd044eb2345ce",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/spec-type-tests",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-11T10:50:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6ac083b1b37b222b5bfba5563822daa5d03372e",
          "body": null,
          "is_bot": false,
          "headline": "Bumped version",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-10T15:20:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dfd025eb2145947b18d9766b9790f007e5df7b0",
          "body": "auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS",
          "is_bot": false,
          "headline": "Merge pull request #752 from modelcontextprotocol/ochafik/fix-path-as",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-10T13:53:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e32f146c8d4edef827ac0f3905d586ff954211d",
          "body": null,
          "is_bot": false,
          "headline": "Update auth.ts",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-10T13:37:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b8d63ed6d9109ddad3307343500d1493bf8e024",
          "body": "…al AS",
          "is_bot": false,
          "headline": "add metadataServerUrl to discoverMetadataWithFallback to allow extern…",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-10T13:36:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea8caa965740035e3c618fd1abae8860b368f3e3",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/fix-path-as",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-10T13:28:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "442e13b60ee79414c316ae4819be55bcc0da00ee",
          "body": "Fix oauth well-known paths to retain path and query",
          "is_bot": false,
          "headline": "Merge pull request #756 from modelcontextprotocol/patch-1",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-10T13:26:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de1ade29d45fc23de314d9bfe34e98c1c3b8e16d",
          "body": null,
          "is_bot": false,
          "headline": "fix unmerge",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-10T13:25:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ca7fd298f33f818e8a323b51a7460ca9f47d7d6",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/fix-path-as",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-10T13:20:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eacdf174c61607582d5d0858f4eb841909c2efc",
          "body": null,
          "is_bot": false,
          "headline": "fallback and refactor",
          "author_name": "ihrpr",
          "author_login": "ihrpr",
          "committed_at": "2025-07-10T10:36:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72cb9a700f7304a54ba075f610e27fbc1fdc8d54",
          "body": null,
          "is_bot": false,
          "headline": "add tests",
          "author_name": "ihrpr",
          "author_login": "ihrpr",
          "committed_at": "2025-07-10T08:30:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11e84f0471b5f2dcc02d1751c17356d2370de6fe",
          "body": "…ync-onsession-callbacks\n\nfeat: support async callbacks for onsessioninitialized and onsessionclosed",
          "is_bot": false,
          "headline": "Merge pull request #751 from modelcontextprotocol/jerome/fix/allow-as…",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-09T20:04:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "031dfc2835d275a833ea4ddc68579ef587ab9d84",
          "body": "* Allow OAuthClientProvider to control authentication to token endpoint w/ addClientAuthentication (exchange / refresh)\n\n* Include mockProvider in exchangeAuthorization tests.\n\n* feature. Add client_secret_basic and none authentication methods\n\n---------\n\nCo-authored-by: Jared Hanson <jaredhanson@gmail.com>\nCo-authored-by: SightStudio <sdm3285@gmail.com>\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "[auth]: support oauth client_secret_basic / none / custom methods (#720)",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-09T17:31:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c90537703b5bc2cf860038ea1c0996739b1ac7b0",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Update auth.ts",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-09T17:09:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87b453d23fe7194920b061ebffab146f35b7d548",
          "body": "… returns external AS\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "auth: fetch AS metadata in well-known subpath from serverUrl when PRM…",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-09T16:58:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c72b52b7f1758297fa3d594b2f3fba79a7dbf527",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/spec-type-tests",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-09T16:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8714f21541ca7b8f9ab20041b8019ed78d8ccf94",
          "body": "* fix(server): validate expiresAt token value for non existence\n\n---------\n\nCo-authored-by: Olivier Chafik <ochafik@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): validate expiresAt token value for non existence (#446)",
          "author_name": "Christian Bromann",
          "author_login": "christian-bromann",
          "committed_at": "2025-07-09T14:43:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ddf6827b6e9535f78102384778d7f5b643576fe",
          "body": "…losed\n\nUpdated StreamableHTTPServerTransport to support both sync and async callbacks:\n- Changed callback types to return void | Promise<void>\n- Used await Promise.resolve() to handle both sync and async callbacks\n- Added comprehensive tests for async callback functionality\n- Errors in callbacks now properly propagate to HTTP responses\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: support async callbacks for onsessioninitialized and onsessionc…",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-09T13:48:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d681f14b33415b6d21a0102bf2e873749319ee86",
          "body": "…nuse\n\nAdd missing app.listen error handling to server examples",
          "is_bot": false,
          "headline": "Merge pull request #749 from modelcontextprotocol/ochafik/check-addri…",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-09T11:36:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4056c098a18a30fafa8aada15f9181b59697f4c1",
          "body": null,
          "is_bot": false,
          "headline": "Add missing app.listen error handling to server examples",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-09T10:23:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22dc79b2a482fa10422d3e79ad5051d91e74e5b6",
          "body": "…-compatibility\n\nImprove stdio test Windows compatibility and refactor command logic\n\nI've pushed updates to address my own comments - thank you @HoberMin for this contribution!",
          "is_bot": false,
          "headline": "Merge pull request #284 from HoberMin/feat/improve-stdio-test-windows…",
          "author_name": "Felix Weinberger",
          "author_login": "felixweinberger",
          "committed_at": "2025-07-08T14:32:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88ede3783e65c6168d5f9237e136e52a116b1a1b",
          "body": "- Moved getDefaultServerParameters from stdio.ts to stdio.test.ts since it's only used in tests\n- Reverted unrelated changes to inMemory.ts and inMemory.test.ts\n- Kept the core Windows compatibility fix for stdio tests\n\nCo-authored-by: HoberMin <99346635+HoberMin@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Address review feedback: move getDefaultServerParameters to test file",
          "author_name": "Felix Weinberger",
          "author_login": "felixweinberger",
          "committed_at": "2025-07-08T14:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7dc1258501cde8cc4a20fb7415c82b18e3bb78b",
          "body": "…ogic",
          "is_bot": false,
          "headline": "feat: improve stdio test Windows compatibility and refactor command l…",
          "author_name": "HoberMin",
          "author_login": "HoberMin",
          "committed_at": "2025-07-08T14:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60310e9478cfc58534d2ed242f21d4a08036d463",
          "body": null,
          "is_bot": false,
          "headline": "feat: Add error handling tests for InMemoryTransport",
          "author_name": "HoberMin",
          "author_login": "HoberMin",
          "committed_at": "2025-07-08T14:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ae4a5727c3c7ce1413f11af20c3ca2225f452ba",
          "body": "* add custom headers on initial _startOrAuth call\n\n* update client/sse.ts: align commonHeaders w/ streamableHttp version\n\n---------\n\nCo-authored-by: Olivier Chafik <ochafik@anthropic.com>",
          "is_bot": false,
          "headline": "add custom headers on initial _startOrAuth call (#318)",
          "author_name": "anthonjn",
          "author_login": "anthonjn",
          "committed_at": "2025-07-07T18:54:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d7896fc72292dfe7625fbf945f4d889a29e80b8",
          "body": "…lete-shttp-hook\n\nAdd onsessionclosed hook to StreamableHTTPServerTransport",
          "is_bot": false,
          "headline": "Merge pull request #743 from modelcontextprotocol/jerome/feature/onde…",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-07T16:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61052b1fa89963c1cf5f038e2972fd85cf19f6a2",
          "body": "…PServerTransport\n\n• Tests callback is called when session is closed via DELETE\n• Tests system works correctly when callback is not provided\n• Tests callback is not called for invalid session DELETE requests\n• Tests correct session ID is passed when multiple sessions exist\n• Follows existing test patterns and includes proper cleanup\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add comprehensive tests for onsessionclosed callback in StreamableHTT…",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T14:19:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52e22ad7cb4d7fc1197976929f2e305dc6d23579",
          "body": "…sport\n\n- Renamed ondelete callback to onsessionclosed for better clarity\n- Moved callback from public property to private field following options pattern\n- Added comprehensive JSDoc documentation explaining the callback's purpose\n- Updated DELETE request handler to use the new callback structure\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Refactor ondelete hook to onsessionclosed in StreamableHTTPServerTran…",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T13:57:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "afb89715695faf2280c786804fdbc8d650aabbd9",
          "body": "Adds optional ondelete callback that fires when DELETE request is received, providing the sessionId for cleanup handling.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add ondelete hook to StreamableHTTPServerTransport",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T13:44:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "96a4f714e56be1ab5ba7fd985a3e6c5a0414ce0f",
          "body": "… / aliased to ResourceTemplateReference)",
          "is_bot": false,
          "headline": "removed checkResourceReference (sdk's ResourceReference is deprecated…",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-07T12:22:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98a04e6e38a8762c66e3f0c7d997d9656427ac77",
          "body": null,
          "is_bot": false,
          "headline": "moved src/spec.types.ts to .",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-07T12:22:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bd56ee46d716beebbc27aa7bf06bba6510ace19",
          "body": "…-support\n\nfeat: Add CORS configuration for browser-based MCP clients",
          "is_bot": false,
          "headline": "Merge pull request #713 from modelcontextprotocol/jerome/cors-browser…",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T11:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aea3feb662c2a339caf8f17fa3363ac54cafafd",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into jerome/cors-browser-support",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T11:42:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c374fd81e67abc8889a6931cce702c6ae9fb628",
          "body": null,
          "is_bot": false,
          "headline": "Merged the CORS tips",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T11:40:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d381df2bc53ad6fbe5eba80d6454d83d3d5ab13",
          "body": null,
          "is_bot": false,
          "headline": "Added cors settings to simpleStreamableHttp example server",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-07T11:35:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9947a92fcd648843b3eb8c6425df35c9299253d",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/spec-type-tests",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-07T10:28:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "593b1f74160ac162b5f1ad16ea69ed4cb1c10130",
          "body": "fix(client): Some mcp server need default env(#393, #196)",
          "is_bot": false,
          "headline": "Merge pull request #394 from sunrabbit123/fix/1",
          "author_name": "Inna Harper",
          "author_login": "ihrpr",
          "committed_at": "2025-07-07T10:28:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ff7ae09f9c76a1edf8c1ad5e1d23b739e631e91",
          "body": null,
          "is_bot": false,
          "headline": "simplify tests",
          "author_name": "ihrpr",
          "author_login": "ihrpr",
          "committed_at": "2025-07-07T10:23:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4bfe556bf1f64e336b7b2f36f2c40da42bd8a48",
          "body": "Signed-off-by: sunrabbit123 <qudwls185@naver.com>",
          "is_bot": false,
          "headline": "fix: format error with merge",
          "author_name": "sunrabbit123",
          "author_login": "sunrabbit123",
          "committed_at": "2025-07-07T09:50:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4607f3795370dc24b76e43ad4b4449264fc5fa2a",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into fix/1",
          "author_name": "오병진",
          "author_login": "sunrabbit123",
          "committed_at": "2025-07-07T09:45:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bdecfc1b9618cbc9e8f9635a14d46ea0d3925d6",
          "body": null,
          "is_bot": false,
          "headline": "Update auth.ts",
          "author_name": "Henry Mao",
          "author_login": "calclavia",
          "committed_at": "2025-07-06T19:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b02c5cda377c7cd9ebcf827ab368bf96e0534cf",
          "body": null,
          "is_bot": false,
          "headline": "Retain URL search parameter",
          "author_name": "Henry Mao",
          "author_login": "calclavia",
          "committed_at": "2025-07-06T19:56:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bda811a95037b71dae55fdc2f2fc55660aaf486b",
          "body": "- Add cors middleware to example servers with Mcp-Session-Id exposed\n- Add CORS documentation section to README\n- Configure minimal CORS settings (only expose required headers)\n\nThis enables browser-based clients to connect to MCP servers by properly\nexposing the Mcp-Session-Id header required for session management.\n\nReported-by: Jerome",
          "is_bot": false,
          "headline": "feat: Add CORS configuration for browser-based MCP clients",
          "author_name": "Jerome",
          "author_login": "jerome3o-anthropic",
          "committed_at": "2025-07-04T15:06:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c0b075511b4f7df88f578d3144c4e5e10d401df",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into ochafik/spec-type-tests",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-04T10:55:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7e4289f3eccfdc3f62a221073228da5c0150bf4",
          "body": null,
          "is_bot": false,
          "headline": "Update spec.types.test.ts",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-04T09:34:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6e00f9a492d84a9b6915e998b6309e61c9aa0cd",
          "body": null,
          "is_bot": false,
          "headline": "Update spec.types.test.ts",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-04T09:33:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ae5522193c88ffa3fe265da8c68260da321d9d5",
          "body": null,
          "is_bot": false,
          "headline": "Update spec.types.test.ts",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-04T09:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fc1581dfb0dbf99d6ad7ce0aae3f70ee302dc12",
          "body": "…k LoggingLevel",
          "is_bot": false,
          "headline": "widen type extraction regex, introduce + test MISSING_SDK_TYPES, chec…",
          "author_name": "Olivier Chafik",
          "author_login": "ochafik",
          "committed_at": "2025-07-04T09:28:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 0,
      "commits_last_year": 31,
      "latest_release_at": null,
      "latest_release_tag": null,
      "releases_from_tags": false,
      "days_since_last_push": 311,
      "active_weeks_last_year": 8,
      "days_since_latest_release": null,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@redocly/mcp-typescript-sdk",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "modelcontextprotocol",
            "mcp"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@redocly/mcp-typescript-sdk",
          "is_deprecated": false,
          "latest_version": "1.18.1",
          "repository_url": "https://github.com/redocly-contrib/mcp-typescript-sdk",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 5,
          "monthly_downloads": 220207,
          "first_published_at": "2025-09-19T10:14:16.423000Z",
          "latest_published_at": "2025-09-19T10:14:17.039000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 310
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-08",
            "count": 1
          },
          {
            "date": "2026-06-22",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 110124,
      "source_files_sampled": 34,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 1115
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 18,
        "malicious_count": 0,
        "assessed_package": "npm:@redocly/mcp-typescript-sdk@1.18.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@redocly/ajv",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "8.11.3"
        },
        {
          "name": "content-type",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.5"
        },
        {
          "name": "raw-body",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.0.0"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.23.8"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 2,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "jspahrsummers",
          "commits": 368,
          "avatar_url": "https://avatars.githubusercontent.com/u/432536?v=4"
        },
        {
          "type": "User",
          "login": "ihrpr",
          "commits": 296,
          "avatar_url": "https://avatars.githubusercontent.com/u/21148364?v=4"
        },
        {
          "type": "User",
          "login": "ochafik",
          "commits": 75,
          "avatar_url": "https://avatars.githubusercontent.com/u/273860?v=4"
        },
        {
          "type": "User",
          "login": "bhosmer-ant",
          "commits": 53,
          "avatar_url": "https://avatars.githubusercontent.com/u/177685734?v=4"
        },
        {
          "type": "User",
          "login": "jerome3o-anthropic",
          "commits": 38,
          "avatar_url": "https://avatars.githubusercontent.com/u/156136903?v=4"
        },
        {
          "type": "User",
          "login": "cliffhall",
          "commits": 35,
          "avatar_url": "https://avatars.githubusercontent.com/u/871933?v=4"
        },
        {
          "type": "User",
          "login": "allenzhou101",
          "commits": 30,
          "avatar_url": "https://avatars.githubusercontent.com/u/46854522?v=4"
        },
        {
          "type": "User",
          "login": "ddworken",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/5304541?v=4"
        },
        {
          "type": "User",
          "login": "sunrabbit123",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/64676070?v=4"
        },
        {
          "type": "User",
          "login": "KKonstantinov",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/655541?v=4"
        }
      ],
      "contributors_sampled": 99,
      "top_contributor_share": 0.319
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "main.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 2/26 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 53 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "23 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d165e6a071f828c180d03fe1d743d0de3d4e4273",
        "ran_at": "2026-07-26T21:37:46Z",
        "aggregate_score": 3.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [
        {
          "number": 3,
          "created_at": "2026-06-08T08:25:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2025-09-18T17:28:10Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/redocly-contrib/mcp-typescript-sdk",
    "host": "github.com",
    "name": "mcp-typescript-sdk",
    "owner": "redocly-contrib"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 39,
      "inputs": {
        "security": 45,
        "vitality": 14,
        "community": 31,
        "governance": 58,
        "engineering": 44
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 14,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 23,
            "inputs": {
              "commits_last_year": 31,
              "human_commit_share": 0.99,
              "days_since_last_push": 311,
              "active_weeks_last_year": 8
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 311 days ago",
                "points": 3.6,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 311
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "8/52 weeks with commits",
                "points": 5.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "31 commits in the last year",
                "points": 13.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 31
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "critical",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "releases_count": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "no releases published",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases_published",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "dormant",
              "guards": [
                "dependencies_clean"
              ],
              "signals": [
                "scorecard_unmaintained"
              ],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": 311,
              "days_since_last_human_commit": 311,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 311 days, with nothing left unanswered; held at dormant by no affected dependency",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_quiet",
                    "params": {
                      "days": 311
                    }
                  },
                  {
                    "code": "abandonment_guarded",
                    "params": {
                      "guards": "no affected dependency"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 31,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 2,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "packages": [
                "@redocly/mcp-typescript-sdk"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 220207
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "220,207 downloads/month across npm",
                "points": 71.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 220207,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 99,
              "top_contributor_share": 0.319
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 32% of commits",
                "points": 15.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 32
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "99 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 99
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 53 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "merged_prs": 2,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2/3 decided PRs merged",
                "points": 25.5,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2,
                      "decided": 3
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 49,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "redocly-contrib",
              "public_repos": 9,
              "account_age_days": 2293
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of redocly-contrib",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "redocly-contrib"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "9 public repos, account ~6 yr old",
                "points": 19.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 9
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "packages": [
                "@redocly/mcp-typescript-sdk"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 310
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 310 days ago",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 310
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 44,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 15,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://modelcontextprotocol.io",
              "has_readme": false,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://modelcontextprotocol.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 45,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 31,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 53 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "23 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@redocly/mcp-typescript-sdk@1.18.1 runtime dependency closure — what installing the published package pulls in — 18 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@redocly/mcp-typescript-sdk@1.18.1",
                  "assessed": 18
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 18,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 18,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 13
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 81,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "good",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.687,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 1115
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "68 of 99 human commits state their intent (structured subject or explanatory body)",
                "points": 36.6,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 68,
                      "sampled": 99
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.1,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "10 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 10,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 110124,
              "source_files_sampled": 34,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/34 source files over 60KB",
                "points": 51.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 34,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T21:38:06.817510Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/redocly-contrib/mcp-typescript-sdk.svg",
  "full_name": "redocly-contrib/mcp-typescript-sdk",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаnpm.