npm @coinbase/cds-mcp-server @9.1.3
score
0.7667
high
flagged
2026-06-08 10:47
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['cds-mcp', 'cds-mcp-server', 'cds-mcp-setup'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+ssh://git@github.com/coinbase/cds.git' also claimed by 4 package(s) under different publishers: ['npm/@coinbase/cds-icons', 'npm/@coinbase/cds-common', 'npm/@coinbase/cds-mobile'] ... |
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@inquirer/prompts', '@modelcontextprotocol/sdk', 'zod'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"coinbase-owner",
"coinbase-npm"
],
"versions": 151
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-J/rJZxI7Q9uiKCytkuluwTJW87Z16SRxSY1iGv/y0CYDeVJyf2QK0mJV/9uwDUpPsu9FMTQ9ZfsusSJOD0b0pg==",
"tarball": "https://registry.npmjs.org/@coinbase/cds-mcp-server/-/cds-mcp-server-9.1.3.tgz",
"unpackedSize": 5620984
},
"dist-tags": {
"latest": "9.1.3",
"placeholder": "0.0.0",
"rc": "9.0.0-rc.3",
"v8-lts": "8.75.3"
},
"latest_version": "9.1.3",
"maintainers": [
{
"email": "opensource@coinbase.com",
"name": "coinbase-owner"
},
{
"email": "coinbase-npm@coinbase.com",
"name": "coinbase-npm"
}
],
"num_versions": 160,
"repository": {
"directory": "packages/mcp-server",
"type": "git",
"url": "git+ssh://git@github.com/coinbase/cds.git"
},
"scripts": null,
"signal_details": {
"bin_added": "new bin entry: ['cds-mcp', 'cds-mcp-server', 'cds-mcp-setup']",
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@inquirer/prompts', '@modelcontextprotocol/sdk', 'zod']",
"shared_repo_different_publisher": "repo 'git+ssh://git@github.com/coinbase/cds.git' also claimed by 4 package(s) under different publishers: ['npm/@coinbase/cds-icons', 'npm/@coinbase/cds-common', 'npm/@coinbase/cds-mobile'] ..."
},
"time": {
"created": "2025-09-30T17:28:47.014Z",
"modified": "2026-05-28T17:18:24.705Z"
}
}