REPORT 01M76YSAGN5ZC4EAKBR9QC308A · static-2

Codebase Memory MCP server: automated checks

What HostedMCP checked on 12 Nov 2026, 04:03 UTC for https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1. Every result links to the public source it came from, so you can check it yourself.

Passed HostedMCP checks

100/100

6 of 8 checks ran · 0 high findings · not a security audit

Checked: 12 Nov 2026, 04:03 UTC
Commit: —
Package: mcpb · 0.12.1
Methodology: static-2

Origin

25 / 25 points

Kaynak deposu bağlantılı ve erişilebilir15 pts
Geçti
Açık kaynak lisansı (OSI)10 pts
Geçti

Practices

10 / 10 points

Son bir yıl içinde commit veya sürüm mevcut10 pts
Geçti

Supply chain

25 / 25 points

Paket adı popüler bir pakete yakın değil15 pts
Geçti
Pakette ve bağımlılıklarında kritik uyarı yok10 pts
Geçti

Tool safety

20 / 20 points

Yıkıcı araçlar etiketlenmiş10 pts
Kontrol edilmedi
Modele yönelik gizli talimat yok20 pts
Geçti

Endpoint

not checked

Uzak uç nokta HTTPS kullanıyor10 pts
Kontrol edilmedi

What these checks do not cover

The server's code is not run and its logic is not audited.
Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.
A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.

What these checks do not cover

The server's code is not run and its logic is not audited.

Results describe the state on the date above and https://github.com/DeusData/codebase-memory-mcp/releases/download/v0.12.1/codebase-memory-mcp-darwin-amd64.mcpb 0.12.1; a later release can differ.

A pass is not a guarantee of safety. Give every server the narrowest token or role it needs.