npm octocode-mcp @16.0.0
score
0.7
high
flagged
2026-07-22 16:28
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'bgauryy' pushed 5 packages in the last 15min on npm |
| dependency_added_unknown | 0.6 | 8 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@octocodeai/octocode-engine', '@octokit/oauth-methods', '@octokit/plugin-throttling', '@octokit/request'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"bgauryy"
],
"versions": 196
}
Evidence (package doc at flag time)
{
"dependencies_count": 9,
"dist": {
"integrity": "sha512-MGyA9gJwYduor/4jYkxYL2aahx4mpoQ2Vm73BMTxG00NE4AmUqIKr5XX+UOXboh6ATcm5OdSLPtKjeaNeGqSIg==",
"tarball": "https://registry.npmjs.org/octocode-mcp/-/octocode-mcp-16.0.0.tgz",
"unpackedSize": 1088807
},
"dist-tags": {
"alpha": "10.0.2",
"latest": "16.0.0"
},
"latest_version": "16.0.0",
"maintainers": [
{
"email": "bgauryy@gmail.com",
"name": "bgauryy"
}
],
"num_versions": 198,
"repository": {
"type": "git",
"url": "git+https://github.com/bgauryy/octocode-mcp.git"
},
"scripts": {
"build": "yarn readme:sync && yarn clean && node build.mjs && yarn build:types",
"build:bin": "bun build ./src/index.ts --compile --minify --sourcemap --outfile dist/octocode-mcp && node scripts/bundle-security.mjs darwin-arm64 dist && node scripts/bundle-engine.mjs darwin-arm64 dist",
"build:bin:all": "bun run build:bin:linux-x64 && bun run build:bin:linux-arm64 && bun run build:bin:linux-x64-musl && bun run build:bin:darwin-arm64 && bun run build:bin:darwin-x64 && bun run build:bin:windows-x64",
"build:bin:darwin-arm64": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-darwin-arm64 --outfile dist/octocode-mcp-darwin-arm64 && node scripts/bundle-security.mjs darwin-arm64 dist && node scripts/bundle-engine.mjs darwin-arm64 dist",
"build:bin:darwin-x64": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-darwin-x64 --outfile dist/octocode-mcp-darwin-x64 && node scripts/bundle-security.mjs darwin-x64 dist && node scripts/bundle-engine.mjs darwin-x64 dist",
"build:bin:linux-arm64": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-linux-arm64 --outfile dist/octocode-mcp-linux-arm64 && node scripts/bundle-security.mjs linux-arm64 dist && node scripts/bundle-engine.mjs linux-arm64 dist",
"build:bin:linux-x64": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-linux-x64 --outfile dist/octocode-mcp-linux-x64 && node scripts/bundle-security.mjs linux-x64 dist && node scripts/bundle-engine.mjs linux-x64 dist",
"build:bin:linux-x64-musl": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-linux-x64-musl --outfile dist/octocode-mcp-linux-x64-musl && node scripts/bundle-security.mjs linux-x64-musl dist && node scripts/bundle-engine.mjs linux-x64-musl dist",
"build:bin:windows-x64": "bun build ./src/index.ts --compile --minify --sourcemap --target=bun-windows-x64 --outfile dist/octocode-mcp-windows-x64.exe && node scripts/bundle-security.mjs windows-x64 dist && node scripts/bundle-engine.mjs windows-x64 dist",
"build:ci": "yarn verify && yarn build",
"build:dev": "yarn readme:sync && yarn workspace @octocodeai/octocode-tools-core build:dev && OCTOCODE_RUNTIME_PLATFORMS=native node build.mjs && yarn build:types",
"build:publish": "yarn build",
"build:types": "tsc --emitDeclarationOnly --outDir dist/.types -p tsconfig.build.json && node scripts/bundle-dts.mjs",
"build:watch": "node build.mjs --watch",
"clean": "rm -rf dist/",
"debug": "npx @modelcontextprotocol/inspector node dist/index.js",
"format": "prettier --write \"src/**/*.{ts,js,json}\"",
"format:check": "prettier --check \"src/**/*.{ts,js,json}\"",
"lint": "eslint src tests",
"lint:fix": "eslint src tests --fix",
"mcp:contracts": "yarn test:contracts",
"mcp:package": "yarn lint && yarn typecheck && yarn test:contracts",
"prepack": "yarn readme:sync && node scripts/check-no-workspace-protocol.mjs && node scripts/prepack.mjs",
"prepublishOnly": "node scripts/check-no-workspace-protocol.mjs",
"readme:sync": "node ../../scripts/sync-package-readmes.mjs .",
"test": "vitest run --coverage",
"test:contracts": "OCTOCODE_ENFORCE_WARNING_FREE_TESTS=1 vitest run tests/index.test.ts tests/index.shutdown.test.ts tests/serverConfig*.test.ts tests/tools/providerExecution.test.ts tests/tools/toolConfig*.test.ts tests/tools/toolFilters.test.ts tests/tools/directToolCatalog.test.ts tests/tools/all-tools.pagination-contract.test.ts tests/tools/lsp_new_public_tools.test.ts tests/tools/toolMetadata.final.test.ts tests/tools/registerBasicTool.test.ts tests/tools/registerRemoteTool*.test.ts tests/security/all-tools-sanitization.test.ts tests/scheme/ tests/utils/bulkOperations.test.ts tests/flows/",
"test:contracts:flows": "OCTOCODE_ENFORCE_WARNING_FREE_TESTS=1 vitest run tests/flows/",
"test:contracts:providers": "OCTOCODE_ENFORCE_WARNING_FREE_TESTS=1 vitest run tests/index.test.ts tests/index.shutdown.test.ts tests/serverConfig*.test.ts tests/tools/providerExecution.test.ts",
"test:contracts:responses": "OCTOCODE_ENFORCE_WARNING_FREE_TESTS=1 vitest run tests/utils/bulkOperations.test.ts",
"test:contracts:startup": "OCTOCODE_ENFORCE_WARNING_FREE_TESTS=1 vitest run tests/index.test.ts tests/index.shutdown.test.ts tests/serverConfig*.test.ts",
"test:quiet": "vitest run --reporter=dot --silent",
"test:ui": "vitest --ui",
"test:watch": "vitest --watch",
"typecheck": "tsc --noEmit --skipLibCheck -p tsconfig.package.json",
"typecheck:full": "tsc --noEmit --skipLibCheck",
"verify": "yarn mcp:package",
"verify:full": "yarn lint && yarn typecheck:full && yarn test"
},
"signal_details": {
"dependency_added_unknown": "8 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@octocodeai/octocode-engine', '@octokit/oauth-methods', '@octokit/plugin-throttling', '@octokit/request'] ...",
"mass_publish_burst": "publisher 'bgauryy' pushed 5 packages in the last 15min on npm"
},
"time": {
"created": "2025-06-06T00:37:31.545Z",
"modified": "2026-07-09T15:05:53.771Z"
}
}