Loading npm security reports…
**Figma Design-to-Code MCP Server | Figma 设计稿转代码 MCP 服务**
Runtime D2C tool calls send a local user identifier, host characteristics, and tool metadata to an external analytics endpoint. No install-time execution was found.
Package source references child process execution.
dist/build/plugin/loader.jsView on unpkg · L1Package source invokes a package manager install command at runtime.
cli/run.jsView on unpkg · L361Package source references dynamic require/import behavior.
dist/build/server.jsView on unpkg · L802Source collects local host identity data and sends it to an external endpoint.
dist/build/utils/tj.jsView on unpkg · L1Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/build/agent/codex-bridge.jsView on unpkgPackage source references child process execution.
dist/build/plugin/loader.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/build/agent/codex-bridge.jsView on unpkgPackage source invokes a package manager install command at runtime.
cli/run.jsView on unpkg · L361Package source references dynamic require/import behavior.
dist/build/server.jsView on unpkg · L802Source collects local host identity data and sends it to an external endpoint.
dist/build/utils/tj.jsView on unpkg · L1Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkg · L94