registry / @cyanheads/mcp-ts-core / 0.10.11

@cyanheads/mcp-ts-core@0.10.11

Agent-native TypeScript framework for building MCP servers. Declarative definitions with auth, multi-backend storage, OpenTelemetry, and first-class support for Bun/Node/Cloudflare Workers.

Static Scan Results

scanned 15h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 203 file(s), 1.39 MB of source, external domains: api.elevenlabs.io, api.openai.com, github.com, img.shields.io, json-schema.org, openrouter.ai, schema.org, unpkg.com, www.npmjs.com

Source & flagged code

5 flagged

dist/utils/parsing/xmlParser.jsView file

Lines 1-40javascript

1/**

2 * @fileoverview Provides a utility class for parsing XML strings.

3 * Wraps the `fast-xml-parser` peer dependency (lazy-loaded on first use) and strips

4 * optional `<think>...</think>` blocks that LLMs sometimes prepend to structured

5 * output before parsing. The underlying `XMLParser` instance is created once with

6 * `processEntities: false` and `htmlEntities: false` and reused for all calls.

7 *

8 * Peer dependency: `fast-xml-parser` — install with `bun add fast-xml-parser`.

9 * @module src/utils/parsing/xmlParser

10 */

11import { configurationError, validationError } from '../../types-global/errors.js';

12import { logger } from '../../utils/internal/logger.js';

13import { requestContextService } from '../../utils/internal/requestContext.js';

14import { thinkBlockRegex } from './thinkBlock.js';

15let _fxp;

16let _xmlParserInstance;

17const FXP_MODULE = 'fast-xml-parser';

18async function getFxp() {

19 if (_fxp)

20 return _fxp;

21 _fxp = await import(FXP_MODULE).catch(() => {

22 throw configurationError('Install "fast-xml-parser" to use XML parsing: bun add fast-xml-parser');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/parsing/xmlParser.jsView on unpkg · L20

23 });

24 return _fxp;

25}

26/**

27 * Utility class for parsing XML strings.

28 *

29 * Lazily loads `fast-xml-parser` on first use (peer dependency — install with

30 * `bun add fast-xml-parser`). The `XMLParser` instance is constructed once at first

31 * call with `{ processEntities: false, htmlEntities: false }` and cached for subsequent

32 * calls. Handles optional `<think>...</think>` blocks that some LLMs prepend to

33 * structured output; the block's content is logged at debug level and stripped before

34 * parsing.

35 */

36export class XmlParser {

37 /**

38 * Parses an XML string into a typed JavaScript object.

39 *

40 * This method is async because `fast-xml-parser` is loaded lazily on first call.

dist/utils/network/fetchWithTimeout.jsView file

Lines 27-67javascript

27 * that a query was present (redacted) so diagnostics still signal it; a

28 * bare-domain `/` pathname is elided to keep output clean.

29 *

30 * Fail-closed: an unparseable URL returns a fixed placeholder rather than

31 * echoing the raw (possibly secret-bearing) string.

dist/utils/security/sanitization.jsView file

Lines 641-681javascript

641 /**

642 * Produces a log-safe deep clone of `input` with sensitive field values replaced by `'[REDACTED]'`.

643 *

644 * This method is **synchronous**. It uses `structuredClone` for deep cloning. Sensitive field

645 * detection combines two strategies:

646 * - **Exact match**: the normalized key (lowercased, non-alphanumeric stripped) matches a

647 * sensitive field name.

648 * - **Word match**: splitting the key by camelCase/snake_case/kebab-case tokens and checking

649 * each token against the sensitive word set.

650 *

dist/utils/security/sanitization.d.tsView file

Lines 361-401typescript

361 /**

362 * Produces a log-safe deep clone of `input` with sensitive field values replaced by `'[REDACTED]'`.

363 *

364 * This method is **synchronous**. It uses `structuredClone` for deep cloning. Sensitive field

365 * detection combines two strategies:

366 * - **Exact match**: the normalized key (lowercased, non-alphanumeric stripped) matches a

367 * sensitive field name.

368 * - **Word match**: splitting the key by camelCase/snake_case/kebab-case tokens and checking

369 * each token against the sensitive word set.

370 *

skills/api-utils/references/security.mdView file

Lines 75-115markdown

76```ts

77// HTML sanitization

78const clean = await sanitization.sanitizeHtml(userHtml, {

79 allowedTags: ['p', 'b', 'i', 'a'],

80 allowedAttributes: { a: ['href'] },

81});

Source & flagged code

5 flagged · loading source

dist/utils/parsing/xmlParser.jsView file

20return _fxp; L21: _fxp = await import(FXP_MODULE).catch(() => { L22: throw configurationError('Install "fast-xml-parser" to use XML parsing: bun add fast-xml-parser');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/parsing/xmlParser.jsView on unpkg · L20

dist/utils/network/fetchWithTimeout.jsView file

47/** L48: * IPv4 patterns for private/reserved ranges that should be blocked when L49: * `rejectPrivateIPs` is enabled. Covers RFC 1918, loopback, link-local, ... L153: } L154: // `node:dns/promises` is available in Node, Bun, and Workers under L155: // `nodejs_compat`. `isNode` covers all three. ... L178: const [ipv4Results, ipv6Results] = await Promise.allSettled([ L179: dns.resolve4(hostname), L180: dns.resolve6(hostname), ... L243: * ); L244: * const data = await response.json(); L245: *

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/utils/network/fetchWithTimeout.jsView on unpkg · L47

dist/utils/security/sanitization.jsView file

661patternName = generic_password severity = medium line = 661 matchedText = * // => ... } }

Medium

Secret Pattern

Hardcoded password in dist/utils/security/sanitization.js

dist/utils/security/sanitization.jsView on unpkg · L661

dist/utils/security/sanitization.d.tsView file

381patternName = generic_password severity = medium line = 381 matchedText = * // => ... } }

Medium

Secret Pattern

Hardcoded password in dist/utils/security/sanitization.d.ts

dist/utils/security/sanitization.d.tsView on unpkg · L381

skills/api-utils/references/security.mdView file

95patternName = generic_password severity = medium line = 95 matchedText = // { pas...e' }

Medium

Secret Pattern

Hardcoded password in skills/api-utils/references/security.md

skills/api-utils/references/security.mdView on unpkg · L95

Findings

1 High7 Medium4 Low

HighCloud Metadata Accessdist/utils/network/fetchWithTimeout.js

MediumDynamic Requiredist/utils/parsing/xmlParser.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/utils/security/sanitization.js

MediumSecret Patterndist/utils/security/sanitization.d.ts

MediumSecret Patternskills/api-utils/references/security.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Package metadata

npm

Authorcyanheads <casey@caseyjhand.com> (https://github.com/cyanheads/mcp-ts-core#readme)

Maintainerscyanheads

Version0.10.13

PublishedJul 5, 2026

LicenseApache-2.0

Dependencies40

Integrityverified

Package size1.09 MB

Files957

Keywordsagentagent-nativeaiai-agentbuncloudflare-workersdeclarativeframework

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/core/index.jstypes → dist/core/index.d.tsexports mapbin → mcp-ts-core

Runtimebun >=1.3.0node >=24.0.0

Artifact4.25 MB · 957 files1 signature(s)

Install lifecycleNo install hooks · other: audit, audit:fix, audit:refresh, build +8

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

5 flagged

dist/utils/parsing/xmlParser.jsView file

Lines 1-40javascript

1/**

2 * @fileoverview Provides a utility class for parsing XML strings.

3 * Wraps the `fast-xml-parser` peer dependency (lazy-loaded on first use) and strips

4 * optional `<think>...</think>` blocks that LLMs sometimes prepend to structured

5 * output before parsing. The underlying `XMLParser` instance is created once with

6 * `processEntities: false` and `htmlEntities: false` and reused for all calls.

7 *

8 * Peer dependency: `fast-xml-parser` — install with `bun add fast-xml-parser`.

9 * @module src/utils/parsing/xmlParser

10 */

11import { configurationError, validationError } from '../../types-global/errors.js';

12import { logger } from '../../utils/internal/logger.js';

13import { requestContextService } from '../../utils/internal/requestContext.js';

14import { thinkBlockRegex } from './thinkBlock.js';

15let _fxp;

16let _xmlParserInstance;

17const FXP_MODULE = 'fast-xml-parser';

18async function getFxp() {

19 if (_fxp)

20 return _fxp;

21 _fxp = await import(FXP_MODULE).catch(() => {

22 throw configurationError('Install "fast-xml-parser" to use XML parsing: bun add fast-xml-parser');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/parsing/xmlParser.jsView on unpkg · L20

23 });

24 return _fxp;

25}

26/**

27 * Utility class for parsing XML strings.

28 *

29 * Lazily loads `fast-xml-parser` on first use (peer dependency — install with

30 * `bun add fast-xml-parser`). The `XMLParser` instance is constructed once at first

31 * call with `{ processEntities: false, htmlEntities: false }` and cached for subsequent

32 * calls. Handles optional `<think>...</think>` blocks that some LLMs prepend to

33 * structured output; the block's content is logged at debug level and stripped before

34 * parsing.

35 */

36export class XmlParser {

37 /**

38 * Parses an XML string into a typed JavaScript object.

39 *

40 * This method is async because `fast-xml-parser` is loaded lazily on first call.

dist/utils/network/fetchWithTimeout.jsView file

Lines 27-67javascript

27 * that a query was present (redacted) so diagnostics still signal it; a

28 * bare-domain `/` pathname is elided to keep output clean.

29 *

30 * Fail-closed: an unparseable URL returns a fixed placeholder rather than

31 * echoing the raw (possibly secret-bearing) string.

dist/utils/security/sanitization.jsView file

Lines 641-681javascript

641 /**

642 * Produces a log-safe deep clone of `input` with sensitive field values replaced by `'[REDACTED]'`.

643 *

644 * This method is **synchronous**. It uses `structuredClone` for deep cloning. Sensitive field

645 * detection combines two strategies:

646 * - **Exact match**: the normalized key (lowercased, non-alphanumeric stripped) matches a

647 * sensitive field name.

648 * - **Word match**: splitting the key by camelCase/snake_case/kebab-case tokens and checking

649 * each token against the sensitive word set.

650 *

dist/utils/security/sanitization.d.tsView file

Lines 361-401typescript

361 /**

362 * Produces a log-safe deep clone of `input` with sensitive field values replaced by `'[REDACTED]'`.

363 *

364 * This method is **synchronous**. It uses `structuredClone` for deep cloning. Sensitive field

365 * detection combines two strategies:

366 * - **Exact match**: the normalized key (lowercased, non-alphanumeric stripped) matches a

367 * sensitive field name.

368 * - **Word match**: splitting the key by camelCase/snake_case/kebab-case tokens and checking

369 * each token against the sensitive word set.

370 *

skills/api-utils/references/security.mdView file

Lines 75-115markdown

76```ts

77// HTML sanitization

78const clean = await sanitization.sanitizeHtml(userHtml, {

79 allowedTags: ['p', 'b', 'i', 'a'],

80 allowedAttributes: { a: ['href'] },

81});