Is @commandable/mcp-connect safe to use?

@commandable/mcp-connect has no known vulnerabilities on the latest version (0.12.1). DepScope rates its health at 53/100 (high risk).

What is the latest version of @commandable/mcp-connect?

The latest version of @commandable/mcp-connect is 0.12.1, released 2026-05-15.

Does @commandable/mcp-connect have known vulnerabilities?

No known vulnerabilities on the latest version of @commandable/mcp-connect.

Is @commandable/mcp-connect deprecated?

No, @commandable/mcp-connect is actively maintained. Latest release: 0.12.1 (2026-05-15).

What are alternatives to @commandable/mcp-connect?

Popular alternatives to @commandable/mcp-connect in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @commandable/mcp-connect use?

@commandable/mcp-connect is licensed under AGPL-3.0-only.

@commandable/mcp-connect

npmv0.12.1

Thin stdio connector package for Commandable MCP clients.

License AGPL-3.0-only8 versions1 maintainers1 deps11 weekly dl

commandable/commandable-mcp

/ 100

Health

use with caution

@commandable/[email protected] low health (53/100) — consider alternatives

Moderate health score (53/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.2 KBminified

0.1 KB gzipped

1 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

@commandable/mcp-core

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@commandable/mcp-connect