0588ec098e
Real fixes (deps): - python (git/fetch/time): idna 3.10->3.18 (GHSA-65pc), starlette 0.49.1->1.3.1 (GHSA-86qp) - npm: vitest ^2.1.8->^4.1.8 (critical GHSA-5xrq UI server RCE). vitest 4 pulls vite 8 (rolldown, no esbuild), clearing the esbuild/vite advisories natively. Remaining root overrides: qs>=6.15.2 (GHSA-q8mj, via express), hono>=4.12.21 (via @modelcontextprotocol/sdk). - npm audit: 0 vulnerabilities; all TS (313) + Python (git/fetch/time) suites and TS builds pass. Hardening (git_add): - The repo already mitigates CVE-2026-27735 by using repo.git.add (the git CLI rejects out-of-tree paths, PR #3164's fix), not repo.index.add (which did not). Add an explicit path-boundary check in git_add as defense in depth plus regression tests asserting the security invariant (out-of-tree paths are never staged), guarding against a regression to repo.index.add. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
48 lines
1.4 KiB
JSON
48 lines
1.4 KiB
JSON
{
|
|
"name": "@modelcontextprotocol/server-everything",
|
|
"version": "2.0.0",
|
|
"description": "MCP server that exercises all the features of the MCP protocol",
|
|
"license": "SEE LICENSE IN LICENSE",
|
|
"mcpName": "io.github.modelcontextprotocol/server-everything",
|
|
"author": "Model Context Protocol a Series of LF Projects, LLC.",
|
|
"homepage": "https://modelcontextprotocol.io",
|
|
"bugs": "https://github.com/modelcontextprotocol/servers/issues",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/modelcontextprotocol/servers.git"
|
|
},
|
|
"type": "module",
|
|
"bin": {
|
|
"mcp-server-everything": "dist/index.js"
|
|
},
|
|
"files": [
|
|
"dist"
|
|
],
|
|
"scripts": {
|
|
"build": "tsc && shx cp -r docs dist/ && shx chmod +x dist/*.js",
|
|
"prepare": "npm run build",
|
|
"watch": "tsc --watch",
|
|
"start:stdio": "node dist/index.js stdio",
|
|
"start:sse": "node dist/index.js sse",
|
|
"start:streamableHttp": "node dist/index.js streamableHttp",
|
|
"prettier:fix": "prettier --write .",
|
|
"prettier:check": "prettier --check .",
|
|
"test": "vitest run --coverage"
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
"cors": "^2.8.5",
|
|
"express": "^5.2.1",
|
|
"jszip": "^3.10.1",
|
|
"zod": "^4.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/cors": "^2.8.19",
|
|
"@types/express": "^5.0.6",
|
|
"@vitest/coverage-v8": "^4.1.8",
|
|
"prettier": "^2.8.8",
|
|
"shx": "^0.3.4",
|
|
"typescript": "^5.6.2",
|
|
"vitest": "^4.1.8"
|
|
}
|
|
}
|