REPORT 01M76YSAGN5ZC4EAKBR9QC308A · static-2

Codebase Memory MCP server: automated checks

What HostedMCP checked on 12 Nov 2026, 04:03 UTC for https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1. Every result links to the public source it came from, so you can check it yourself.

Passed HostedMCP checks

100/100

6 of 8 checks ran · 0 high findings · not a security audit

Checked: 12 Nov 2026, 04:03 UTC
Commit: —
Package: mcpb · 0.12.1
Methodology: static-2

Origin

25 / 25 points

ソースリポジトリがリンクされており、アクセス可能15 pts
合格
オープンソースライセンス (OSI)10 pts
合格

Practices

10 / 10 points

過去1年以内にコミットまたはリリースあり10 pts
合格

Supply chain

25 / 25 points

パッケージ名が有名なパッケージに酷似していない15 pts
合格
パッケージと依存関係に重大なアドバイザリがない10 pts
合格

Tool safety

20 / 20 points

破壊的なツールがラベル付けされている10 pts
未チェック
モデルへの隠れた指示がない20 pts
合格

Endpoint

not checked

リモートエンドポイントがHTTPSを使用10 pts
未チェック

What these checks do not cover

The server's code is not run and its logic is not audited.
Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.
A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.

What these checks do not cover

The server's code is not run and its logic is not audited.

Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.

A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.