0588ec098e
Real fixes (deps): - python (git/fetch/time): idna 3.10->3.18 (GHSA-65pc), starlette 0.49.1->1.3.1 (GHSA-86qp) - npm: vitest ^2.1.8->^4.1.8 (critical GHSA-5xrq UI server RCE). vitest 4 pulls vite 8 (rolldown, no esbuild), clearing the esbuild/vite advisories natively. Remaining root overrides: qs>=6.15.2 (GHSA-q8mj, via express), hono>=4.12.21 (via @modelcontextprotocol/sdk). - npm audit: 0 vulnerabilities; all TS (313) + Python (git/fetch/time) suites and TS builds pass. Hardening (git_add): - The repo already mitigates CVE-2026-27735 by using repo.git.add (the git CLI rejects out-of-tree paths, PR #3164's fix), not repo.index.add (which did not). Add an explicit path-boundary check in git_add as defense in depth plus regression tests asserting the security invariant (out-of-tree paths are never staged), guarding against a regression to repo.index.add. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
40 lines
No EOL
1.1 KiB
JSON
40 lines
No EOL
1.1 KiB
JSON
{
|
|
"name": "@modelcontextprotocol/server-sequential-thinking",
|
|
"version": "0.6.2",
|
|
"description": "MCP server for sequential thinking and problem solving",
|
|
"license": "SEE LICENSE IN LICENSE",
|
|
"mcpName": "io.github.modelcontextprotocol/server-sequential-thinking",
|
|
"author": "Model Context Protocol a Series of LF Projects, LLC.",
|
|
"homepage": "https://modelcontextprotocol.io",
|
|
"bugs": "https://github.com/modelcontextprotocol/servers/issues",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/modelcontextprotocol/servers.git"
|
|
},
|
|
"type": "module",
|
|
"bin": {
|
|
"mcp-server-sequential-thinking": "dist/index.js"
|
|
},
|
|
"files": [
|
|
"dist"
|
|
],
|
|
"scripts": {
|
|
"build": "tsc && shx chmod +x dist/*.js",
|
|
"prepare": "npm run build",
|
|
"watch": "tsc --watch",
|
|
"test": "vitest run --coverage"
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
"chalk": "^5.3.0",
|
|
"yargs": "^17.7.2"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22",
|
|
"@types/yargs": "^17.0.32",
|
|
"@vitest/coverage-v8": "^4.1.8",
|
|
"shx": "^0.3.4",
|
|
"typescript": "^5.3.3",
|
|
"vitest": "^4.1.8"
|
|
}
|
|
} |