npm @sap-ux/fiori-mcp-server @1.0.2
score
0.85
high
flagged
2026-06-02 01:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'GitHub Actions' pushed 1228 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/SAP/open-ux-tools.git' also claimed by 10 package(s) under different publishers: ['npm/@sap-ux/odata-annotation-core', 'npm/@sap-ux/annotation-generator', 'npm/@sap-ux/eslint-plugin-fiori-tools'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"tqueck",
"kranthie.sap",
"sap_extncrepos",
"sap-ospo-admin",
"devinea"
],
"versions": 102
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-AtahhvjBxQU+OW9fW4MomBIWoH0HCukg5yH3epfjGyZK9ROjz6zps0kD5xjekiXALLnYf+XmF0jF21+M6ffhKg==",
"tarball": "https://registry.npmjs.org/@sap-ux/fiori-mcp-server/-/fiori-mcp-server-1.0.2.tgz",
"unpackedSize": 7465818
},
"dist-tags": {
"latest": "1.0.2"
},
"latest_version": "1.0.2",
"maintainers": [
{
"email": "tobias.queck@sap.com",
"name": "tqueck"
},
{
"email": "kranthi.kumar.muppala@sap.com",
"name": "kranthie.sap"
},
{
"email": "mob.extrepo.stores@sap.com",
"name": "sap_extncrepos"
},
{
"email": "ospo@sap.com",
"name": "sap-ospo-admin"
},
{
"email": "austin.devine@sap.com",
"name": "devinea"
}
],
"num_versions": 107,
"repository": {
"directory": "packages/fiori-mcp-server",
"type": "git",
"url": "https://github.com/SAP/open-ux-tools.git"
},
"scripts": {
"build": "npm-run-all build-compile build-bundle",
"build-bundle": "node esbuild.mjs --minify && pnpm run copy-icons",
"build-compile": "tsc --noEmit",
"build-dev": "node esbuild.mjs --sourcemap=inline",
"build-esbuild-base": "node esbuild.mjs",
"bundle": "npm-run-all build tgz:package tgz:rename",
"clean": "rimraf --glob dist test/test-output *.tsbuildinfo",
"copy-icons": "node -e \"const fs=require('node:fs');const path=require('node:path');['icon.png','icon.svg'].forEach(f=>fs.copyFileSync(path.join('assets',f),path.join('dist',f)))\"",
"format": "prettier --write '**/*.{js,json,ts,yaml,yml}' --ignore-path ../../.prettierignore",
"inspector": "npx @modelcontextprotocol/inspector node dist/index.js",
"inspector-ts": "npx @modelcontextprotocol/inspector ts-node -T src/index.ts --log-level=debug",
"lint": "eslint",
"lint:fix": "eslint --fix",
"start": "npx -y supergateway --port 9881 --sessionTimeout 300000 --stdio \"node ./dist/index.js\"",
"test": "cross-env NODE_OPTIONS='--experimental-vm-modules' jest --ci --forceExit --detectOpenHandles --colors",
"test:integration:dev": "promptfoo eval --config test/integration/scenarios/test-dev.yaml --max-concurrency 1 --repeat 1 --output reports/integration.txt",
"test:integration:multiple": "npm run test:promptfoo -- --repeat 5",
"test:integration:once": "promptfoo eval --config test/integration/scenarios/promptfooconfig.yaml --max-concurrency 1 --repeat 1 --output reports/integration.txt",
"tgz:package": "pnpm pack",
"tgz:rename": "node -e \"const fs=require('fs'), p=require('./package.json'), d=new Date().toISOString().split('T')[0], oldName=p.name.startsWith('@') ? `${p.name.replace('@', '').replace('/', '-')}-${p.version}.tgz` : `${p.name}-${p.version}.tgz`; fs.renameSync(oldName, `${oldName.replace('.tgz','')}-${d}.tgz`)\"",
"view:integration": "promptfoo view -y",
"watch": "tsc --watch"
},
"signal_details": {
"mass_publish_burst": "publisher 'GitHub Actions' pushed 1228 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'https://github.com/SAP/open-ux-tools.git' also claimed by 10 package(s) under different publishers: ['npm/@sap-ux/odata-annotation-core', 'npm/@sap-ux/annotation-generator', 'npm/@sap-ux/eslint-plugin-fiori-tools'] ..."
},
"time": {
"created": "2025-09-02T18:00:37.755Z",
"modified": "2026-06-01T18:00:40.990Z"
}
}