Loading npm security reports…
Android/Kotlin/Flutter-focused fork of the docs MCP server: index and search version-correct library documentation
Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references child process execution.
dist/utils-CoXjpQk0.jsView on unpkg · L1Package source invokes a package manager install command at runtime.
dist/utils-CoXjpQk0.jsView on unpkg · L891Package source references weak cryptographic algorithms.
dist/main-C-Q2zxxv.jsView on unpkg · L20Package source references a known benign dynamic code generation pattern.
dist/assets/main.jsView on unpkg · L468Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L50Package source references child process execution.
dist/utils-CoXjpQk0.jsView on unpkg · L1Package source references weak cryptographic algorithms.
dist/main-C-Q2zxxv.jsView on unpkg · L20Package source invokes a package manager install command at runtime.
dist/utils-CoXjpQk0.jsView on unpkg · L891Package source references a known benign dynamic code generation pattern.
dist/assets/main.jsView on unpkg · L468