registry / davinci-resolve-mcp / 2.62.1

davinci-resolve-mcp@2.62.1

NPM bootstrapper for the DaVinci Resolve MCP Server.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 203 file(s), 1.79 MB of source

Source & flagged code

7 flagged

bin/davinci-resolve-advanced-mcp.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

3 * davinci-resolve-advanced-mcp — entry point.

4 *

5 * The Node, beyond-the-API sibling bin to davinci-resolve-mcp. Authors/edits

6 * DaVinci Resolve files (.drp/.drt/.drx) offline — no Resolve, cloud or local.

7 *

8 * Boots the stdio MCP server in resolve-advanced/server. (During dev the

9 * vendored libs + deps live under resolve-advanced/; Phase 4 promotes deps to

10 * the repo root for the published package.)

11 */

13import { fileURLToPath } from 'node:url';

14import path from 'node:path';

16const __dirname = path.dirname(fileURLToPath(import.meta.url));

17const serverEntry = path.resolve(__dirname, '..', 'resolve-advanced', 'server', 'index.mjs');

19const { startServer } = await import(serverEntry);

20await startServer();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/davinci-resolve-advanced-mcp.mjsView on unpkg · L18

resolve-advanced/server/lineage-db.mjsView file

Lines 195-235javascript

195const numOrNull = (v) => {

196 const n = Number(v);

197 return Number.isFinite(n) ?

resolve-advanced/vendor/conform-qc/adapters/resolve/driver.pyView file

•path = resolve-advanced/vendor/conform-qc/adapters/resolve/driver.py kind = build_helper sizeBytes = 6295 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

resolve-advanced/vendor/conform-qc/adapters/resolve/driver.pyView on unpkg

resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drpView file

•path = resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drp kind = high_entropy_blob sizeBytes = 38305 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drpView on unpkg

•path = resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drp kind = payload_in_excluded_dir sizeBytes = 38305 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drpView on unpkg

•path = resolve-advanced/vendor/drp-format/__tests__/fixtures/p0-3-session30-empty-effectfilters.drp kind = compressed_blob sizeBytes = 38305 magicHex = [redacted]

Medium

Ships Compressed Blob

Source & flagged code

7 flagged · loading source

bin/davinci-resolve-advanced-mcp.mjsView file

18L19: const { startServer } = await import(serverEntry); L20: await startServer();

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code