REPORT 01M76YSAGN5ZC4EAKBR9QC308A · static-2

Codebase Memory MCP server: automated checks

What HostedMCP checked on 12 Nov 2026, 04:03 UTC for https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1. Every result links to the public source it came from, so you can check it yourself.

Passed HostedMCP checks

100/100

6 of 8 checks ran · 0 high findings · not a security audit

Checked: 12 Nov 2026, 04:03 UTC
Commit: —
Package: mcpb · 0.12.1
Methodology: static-2

Origin

25 / 25 points

Repositorio de origen vinculado y accesible15 pts
Aprobado
Licencia de código abierto (OSI)10 pts
Aprobado

Practices

10 / 10 points

Commit o lanzamiento en el último año10 pts
Aprobado

Supply chain

25 / 25 points

El nombre del paquete no es similar a un paquete popular15 pts
Aprobado
Sin avisos críticos en el paquete ni en sus dependencias10 pts
Aprobado

Tool safety

20 / 20 points

Las herramientas destructivas están etiquetadas10 pts
No verificado
Sin instrucciones ocultas para el modelo20 pts
Aprobado

Endpoint

not checked

El endpoint remoto usa HTTPS10 pts
No verificado

What these checks do not cover

The server's code is not run and its logic is not audited.
Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.
A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.

What these checks do not cover

The server's code is not run and its logic is not audited.

Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.

A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.