{
  "name": "mcp-scan",
  "version": "2.3.0",
  "description": "Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.",
  "type": "module",
  "main": "./dist/lib.js",
  "module": "./dist/lib.js",
  "types": "./dist/lib.d.ts",
  "exports": {
    ".": {
      "types": "./dist/lib.d.ts",
      "import": "./dist/lib.js",
      "require": "./dist/lib.cjs"
    }
  },
  "bin": {
    "mcp-scan": "./dist/index.js"
  },
  "files": [
    "dist",
    "data",
    "action.yml",
    "action/dist"
  ],
  "engines": {
    "node": ">=18"
  },
  "overrides": {
    "xml2js": ">=0.5.0",
    "lodash": ">=4.18.1"
  },
  "scripts": {
    "build": "tsup && node -e \"const{cpSync,mkdirSync}=require('fs');mkdirSync('data',{recursive:true});cpSync('src/data/cve-snapshot.json','data/cve-snapshot.json');\"",
    "build:action": "tsup --config tsup.config.ts",
    "dev": "tsup --watch",
    "pretest": "npm run build",
    "test": "vitest run",
    "test:watch": "vitest",
    "lint": "eslint src tests",
    "typecheck": "tsc -p tsconfig.typecheck.json",
    "update-cve-snapshot": "npx tsx src/scripts/update-cve-snapshot.ts",
    "prepublishOnly": "npm run build"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Abanoub-Rodolf/mcp-scan.git"
  },
  "keywords": [
    "mcp",
    "security",
    "scanner",
    "audit",
    "model-context-protocol",
    "mcp-scan",
    "mcp-security",
    "mcp-server",
    "claude-desktop",
    "cursor",
    "vscode",
    "windsurf",
    "ai-security",
    "llm-security",
    "prompt-injection",
    "supply-chain-security",
    "secret-detection",
    "typosquatting",
    "data-flow-analysis",
    "sarif",
    "github-action",
    "cli",
    "devtools",
    "security-audit",
    "vulnerability-scanner"
  ],
  "author": "Abanoub Rodolf Boctor <rodolf@thynkq.com>",
  "license": "MIT",
  "funding": {
    "type": "github",
    "url": "https://github.com/sponsors/Abanoub-Rodolf"
  },
  "bugs": {
    "url": "https://github.com/Abanoub-Rodolf/mcp-scan/issues"
  },
  "homepage": "https://gitlab.com/abanoub.rodolf/mcp-scan",
  "dependencies": {
    "chalk": "^5.3.0",
    "cli-table3": "^0.6.4",
    "commander": "^12.0.0",
    "fast-glob": "^3.3.3",
    "ora": "^8.0.1",
    "semver": "^7.7.4",
    "smol-toml": "^1.9.1",
    "uuid": "^13.0.0",
    "yaml": "^2.8.3"
  },
  "optionalDependencies": {
    "blessed": "^0.1.81",
    "blessed-contrib": "^4.11.0"
  },
  "devDependencies": {
    "@actions/core": "^3.0.0",
    "@eslint/js": "^10.0.1",
    "@types/blessed": "^0.1.27",
    "@types/node": "^20.12.7",
    "@types/semver": "^7.7.1",
    "@types/uuid": "^10.0.0",
    "@typescript-eslint/eslint-plugin": "^8.57.1",
    "@typescript-eslint/parser": "^8.57.1",
    "@vitest/coverage-v8": "^4.1.1",
    "eslint": "^10.1.0",
    "execa": "^9.6.1",
    "globals": "^17.4.0",
    "tsup": "^8.5.1",
    "typescript": "^5.4.5",
    "typescript-eslint": "^8.57.1",
    "vitest": "^4.1.11",
    "vuln-vects": "^1.1.0"
  }
}