Is @modelcontextprotocol/server-github safe to use?

@modelcontextprotocol/server-github has no known vulnerabilities on the latest version (2025.4.8). DepScope rates its health at 28/100 (critical risk).

What is the latest version of @modelcontextprotocol/server-github?

The latest version of @modelcontextprotocol/server-github is 2025.4.8, released 2025-04-08.

Does @modelcontextprotocol/server-github have known vulnerabilities?

No known vulnerabilities on the latest version of @modelcontextprotocol/server-github.

Is @modelcontextprotocol/server-github deprecated?

Yes, @modelcontextprotocol/server-github is deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. Consider using ? instead.

What are alternatives to @modelcontextprotocol/server-github?

Popular alternatives to @modelcontextprotocol/server-github in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does @modelcontextprotocol/server-github use?

@modelcontextprotocol/server-github is licensed under MIT.

@modelcontextprotocol/server-github

npmv2025.4.8deprecated

MCP server for using the GitHub API

License MITpermissive13 versions6 maintainers7 deps147,460 weekly dl

/ 100

Health

find alternative

@modelcontextprotocol/server-github is deprecated — find an alternative

Moderate health score (28/100) — verify manually
Package is deprecated

Health breakdown0 – 100

5/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (7)

zod node-fetch @types/node @types/node-fetch zod-to-json-schema universal-user-agent @modelcontextprotocol/sdk

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@modelcontextprotocol/server-github