registry / puax-mcp-server / 3.10.1

puax-mcp-server@3.10.1

PUAX MCP Server - AI角色选择、切换和激活服务器（支持 HTTP/SSE 和 STDIO 模式）- 文言文增强版

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 112 file(s), 865 KB of source, external domains: 127.0.0.1, github.com, puax.net

Source & flagged code

1 flagged

package.jsonView file

Lines 19-59json

19 "watch": "tsc --watch",

20 "serve": "npm run build && npm start",

21 "test": "jest",

22 "test:unit": "jest test/unit",

23 "test:http": "jest test/http",

24 "test:sse": "jest test/sse",

25 "test:tools": "jest test/tools",

26 "test:stdio": "jest test/stdio",

27 "test:integration": "jest test/integration",

28 "test:coverage": "jest --coverage",

29 "test:watch": "jest --watch",

30 "test:verbose": "jest --verbose",

31 "lint": "eslint src/**/*.ts",

32 "lint:fix": "eslint src/**/*.ts --fix",

33 "format": "prettier --write src/**/*.ts",

34 "format:check": "prettier --check src/**/*.ts",

35 "typecheck": "tsc --noEmit",

36 "validate": "npm run lint && npm run typecheck && npm test",

37 "validate:metadata": "node scripts/validate-metadata.js",

38 "test:evals": "jest test/evals",

39 "postinstall": "echo \"Run 'npx puax-mcp-server' to start the server\""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 },

41 "keywords": [

42 "puax",

43 "mcp",

44 "ai",

45 "prompt",

46 "agent",

47 "http",

48 "sse",

49 "streamable-http",

50 "stdio"

51 ],

52 "author": "PUAX Team",

53 "license": "MIT",

54 "dependencies": {

55 "@modelcontextprotocol/sdk": "^1.25.1",

56 "glob": "^10.3.10",

57 "yaml": "^2.3.4",

58 "zod": "^3.22.4"

59 },

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.postinstall = echo "Run 'npx puax-mcp-server' to start the server"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 High2 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

package.jsonView file

Lines 19-59json

19 "watch": "tsc --watch",

20 "serve": "npm run build && npm start",

21 "test": "jest",

22 "test:unit": "jest test/unit",

23 "test:http": "jest test/http",

24 "test:sse": "jest test/sse",

25 "test:tools": "jest test/tools",

26 "test:stdio": "jest test/stdio",

27 "test:integration": "jest test/integration",

28 "test:coverage": "jest --coverage",

29 "test:watch": "jest --watch",

30 "test:verbose": "jest --verbose",

31 "lint": "eslint src/**/*.ts",

32 "lint:fix": "eslint src/**/*.ts --fix",

33 "format": "prettier --write src/**/*.ts",

34 "format:check": "prettier --check src/**/*.ts",

35 "typecheck": "tsc --noEmit",

36 "validate": "npm run lint && npm run typecheck && npm test",

37 "validate:metadata": "node scripts/validate-metadata.js",

38 "test:evals": "jest test/evals",

39 "postinstall": "echo \"Run 'npx puax-mcp-server' to start the server\""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 },

41 "keywords": [

42 "puax",

43 "mcp",

44 "ai",

45 "prompt",

46 "agent",

47 "http",

48 "sse",

49 "streamable-http",

50 "stdio"

51 ],

52 "author": "PUAX Team",

53 "license": "MIT",

54 "dependencies": {

55 "@modelcontextprotocol/sdk": "^1.25.1",

56 "glob": "^10.3.10",

57 "yaml": "^2.3.4",

58 "zod": "^3.22.4"

59 },