REPORT 01M76YSAGN5ZC4EAKBR9QC308A · static-2

Codebase Memory MCP server: automated checks

What HostedMCP checked on 12 Nov 2026, 04:03 UTC for https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1. Every result links to the public source it came from, so you can check it yourself.

Passed HostedMCP checks

100/100

6 of 8 checks ran · 0 high findings · not a security audit

Checked: 12 Nov 2026, 04:03 UTC
Commit: —
Package: mcpb · 0.12.1
Methodology: static-2

Origin

25 / 25 points

소스 저장소 연결 및 접근 가능15 pts
통과
오픈 소스 라이선스 (OSI)10 pts
통과

Practices

10 / 10 points

최근 1년 내 커밋 또는 릴리스10 pts
통과

Supply chain

25 / 25 points

패키지 이름이 인기 패키지와 유사하지 않음15 pts
통과
패키지와 의존성에 심각한 보안 권고 없음10 pts
통과

Tool safety

20 / 20 points

파괴적인 도구에 라벨 표시됨10 pts
검사되지 않음
모델에 대한 숨겨진 지침 없음20 pts
통과

Endpoint

not checked

원격 엔드포인트가 HTTPS 사용10 pts
검사되지 않음

What these checks do not cover

The server's code is not run and its logic is not audited.
Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.
A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.

What these checks do not cover

The server's code is not run and its logic is not audited.

Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.

A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.