Is @commandable/mcp-core safe to use?

@commandable/mcp-core has no known vulnerabilities on the latest version (0.14.2). DepScope rates its health at 56/100 (high risk).

What is the latest version of @commandable/mcp-core?

The latest version of @commandable/mcp-core is 0.14.2, released 2026-05-15.

Does @commandable/mcp-core have known vulnerabilities?

No known vulnerabilities on the latest version of @commandable/mcp-core.

Is @commandable/mcp-core deprecated?

No, @commandable/mcp-core is actively maintained. Latest release: 0.14.2 (2026-05-15).

What are alternatives to @commandable/mcp-core?

Popular alternatives to @commandable/mcp-core in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does @commandable/mcp-core use?

@commandable/mcp-core is licensed under AGPL-3.0-only.

@commandable/mcp-core

npmv0.14.2

Shared runtime, DB, integration, and MCP logic for Commandable packages.

License AGPL-3.0-only19 versions1 maintainers12 deps15 weekly dl

commandable/commandable-mcp

56

/ 100

Health

use with caution

@commandable/[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

0

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (12)

@commandable/integration-data @modelcontextprotocol/sdk better-sqlite3 drizzle-orm fastest-levenshtein google-auth-library js-yaml json-schema marked pg turndown zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@commandable/mcp-core