BEACON

← candidates

npm hevy-mcp @3.3.0

score
0.55 med
flagged 2026-07-19 23:40
signals by category
content 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
script_count_spike 0.5 scripts count 17 -> 39
topology
dependency_added_unknown 0.6 9 new non-watchlisted dep(s): ['@cloudflare/workers-oauth-provider', '@opentelemetry/api', '@opentelemetry/exporter-metrics-otlp-http', '@opentelemetry/exporter-trace-otlp-http', '@opentelemetry/resources'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "chrisdoc"
  ],
  "versions": 198
}

Evidence (package doc at flag time)

{
  "dependencies_count": 13,
  "dist": {
    "integrity": "sha512-HGorUG87FoBIh7N6ak8azs8zM4GzmZ3HQbKgmV2vD2SKZx8Y4zwKQaCIKPfJm5W5IUHlQBjrIYLj0E9guUUbCA==",
    "tarball": "https://registry.npmjs.org/hevy-mcp/-/hevy-mcp-3.3.0.tgz",
    "unpackedSize": 522177
  },
  "dist-tags": {
    "beta": "1.28.1-beta.1",
    "latest": "3.3.0"
  },
  "latest_version": "3.3.0",
  "maintainers": [
    {
      "email": "c.kieslich@gmail.com",
      "name": "chrisdoc"
    }
  ],
  "num_versions": 213,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/chrisdoc/hevy-mcp.git"
  },
  "scripts": {
    "build": "tsdown",
    "build:client": "kubb generate",
    "build:standalone": "cross-env HEVY_MCP_BUILD_MODE=standalone tsdown",
    "check": "oxlint . --type-aware --type-check && oxfmt . --check",
    "check:changeset": "changeset status --since=origin/main",
    "check:fix": "oxlint . --type-aware --type-check && oxfmt . --write",
    "check:server-manifest": "node scripts/server-manifest.mjs check",
    "check:types": "tsc --noEmit",
    "commit": "commit",
    "dev": "tsx watch --env-file .env --clear-screen=false src/cli.ts",
    "inspect": "npm run build && npx @modelcontextprotocol/inspector@latest node --env-file .env dist/cli.mjs",
    "inspect:npm": "npx @modelcontextprotocol/inspector@latest npx hevy-mcp@latest",
    "measure:tokens": "tsx scripts/measure-token-cost.ts",
    "openapi": "node ./scripts/openapi-spec.js",
    "prepack": "npm run check:server-manifest && npm run build",
    "release": "changeset publish",
    "start": "node --env-file .env dist/cli.mjs",
    "sync:server-manifest": "node scripts/server-manifest.mjs sync",
    "test": "npm run build && node --env-file-if-exists=.env node_modules/vitest/vitest.mjs --run",
    "test:contract": "vitest run src/index.test.ts src/utils/output-schemas.test.ts tests/unit/server-manifest.test.ts",
    "test:coverage": "npm run test:unit -- --coverage --coverage.reportsDirectory=coverage/unit && npm run test:mcp -- --coverage --coverage.reportsDirectory=coverage/mocked",
    "test:live": "node --env-file-if-exists=.env scripts/run-live-tests.mjs",
    "test:mcp": "vitest run tests/integration/mocked",
    "test:nightly": "node --env-file-if-exists=.env tests/nightly/test_hevy_mcp.mjs",
    "test:pack": "node tests/package/npm-pack-smoke.mjs",
    "test:performance": "npm run build && vitest run tests/performance/performance.test.ts",
    "test:pr": "npm run test:unit && npm run test:mcp && npm run test:contract && npm run test:stdio && npm run test:worker-http && npm run test:pack",
    "test:stdio": "vitest run src/utils/stdio-observability.test.ts src/utils/graceful-shutdown.test.ts src/utils/graceful-shutdown.child-process.test.ts",
    "test:unit": "vitest run --exclude 'tests/integration/**' --exclude 'tests/performance/**'",
    "test:worker-http": "vitest run tests/integration/worker-http.integration.test.ts",
    "test:worker-http:live": "node --env-file-if-exists=.env scripts/run-live-worker-http-tests.mjs",
    "version": "npm run sync:server-manifest && git add server.json",
    "version:changesets": "changeset version && npm run sync:server-manifest",
    "version:major": "npm version major",
    "version:minor": "npm version minor",
    "version:patch": "npm version patch",
    "worker:deploy": "wrangler deploy",
    "worker:dev": "wrangler dev",
    "worker:dry-run": "wrangler deploy --dry-run --outdir .wrangler/dry-run"
  },
  "signal_details": {
    "dependency_added_unknown": "9 new non-watchlisted dep(s): ['@cloudflare/workers-oauth-provider', '@opentelemetry/api', '@opentelemetry/exporter-metrics-otlp-http', '@opentelemetry/exporter-trace-otlp-http', '@opentelemetry/resources'] ...",
    "script_count_spike": "scripts count 17 -> 39"
  },
  "time": {
    "created": "2025-03-26T06:41:33.849Z",
    "modified": "2026-07-18T09:41:29.313Z"
  }
}