# Security Trust Report: grupoa-mcp-azure-devops

**[grupoa-mcp-azure-devops@1.0.10](https://www.npmjs.com/package/grupoa-mcp-azure-devops): 60/100 | Grade: C+ | Tier: STANDARD** (confidence: ±3)

> Scanned on 2026-04-10 from 8 security databases. [View package on npm →](https://www.npmjs.com/package/grupoa-mcp-azure-devops)

## TL;DR

- No critical vulnerabilities from live scan
- Pin your version and monitor for changes

## Score Breakdown

```
Maintainer Trust:  ████████████░░░░░░░░ 62/100
Package Health:    ████████████████░░░░ 80/100
Supply Chain:      ██████████░░░░░░░░░░ 48/100
Community:         ████████░░░░░░░░░░░░ 40/100
```

### Why this score?

- Supply Chain is 48 because: risky dependencies
- Community is 40 because: no public GitHub repo linked (may be private or on another platform)

## Vulnerabilities

✅ No known vulnerabilities detected across 8 security databases.

## Key Risk Flags

- 🟠 **HIGH**: Primary maintainer account is less than 6 months old (2 days)
- 🟠 **HIGH**: No license declared
- 🟠 **HIGH**: Depends on historically compromised package: axios
- 🟠 **HIGH**: 1 direct dependencies have known security issues

## 🛠️ What Should You Do?

**Always:** Pin version, run `pkgtrust scan` in CI, monitor at [nrupak.com/trust/grupoa-mcp-azure-devops](https://nrupak.com/trust/grupoa-mcp-azure-devops)

## Maintainers (1)

- [p_alexsandervargas](https://www.npmjs.com/~p_alexsandervargas) ✅ 2FA (freemail) — [Trust profile](https://nrupak.com/trust/maintainer/p_alexsandervargas)

**Methodology:** 18+ signals across 4 categories (Maintainer 35%, Package 25%, Supply Chain 25%, Community 15%). [Full scoring docs →](https://nrupak.com/trust)

**Check your project:** `npm i -g @cyberhub/pkgtrust && pkgtrust scan grupoa-mcp-azure-devops` — [CLI docs](https://npmjs.com/package/@cyberhub/pkgtrust)
**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev · CISA KEV · Packagephobia · OpenSSF Scorecard · Ecosyste.ms · GitHub Enhanced · Keybase · npm Provenance

---

*Report by [pkgtrust](https://nrupak.com/trust/grupoa-mcp-azure-devops) · [Dashboard](https://nrupak.com/trust) · [Compare](https://nrupak.com/trust/compare) · [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*

*This is an automated security report. Not affiliated with the grupoa-mcp-azure-devops team. Updated 2026-04-10.*