npm @modelcontextprotocol/client @2.4.0
score
0.65
med
flagged
2026-11-06 01:05
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| license_changed | 0.4 | 'MIT' -> 'Apache-2.0' |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/modelcontextprotocol/typescript-sdk.git' also claimed by 10 package(s) under different publishers: ['npm/@modelcontextprotocol/codemod', 'npm/@modelcontextprotocol/fastify', 'npm/@modelcontextprotocol/node'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"jspahrsummers",
"pcarleton",
"fweinberger",
"thedsp",
"ashwin-ant",
"ochafik-ant"
],
"versions": 9
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-LgrD2OphHuG12vfKFKz6SOnq7bKHQmhGJIAYdD+MZBn2npHEyry6uD8zvktodtl5CQM85MO0anUyD9JwmUmxww==",
"tarball": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.4.0.tgz",
"unpackedSize": 7311863
},
"dist-tags": {
"latest": "2.4.0"
},
"latest_version": "2.4.0",
"maintainers": [
{
"email": "justin@jspahrsummers.com",
"name": "jspahrsummers"
},
{
"email": "paul@modelcontextprotocol.io",
"name": "pcarleton"
},
{
"email": "fweinberger@anthropic.com",
"name": "fweinberger"
},
{
"email": "david@modelcontextprotocol.io",
"name": "thedsp"
},
{
"email": "ochafik@anthropic.com",
"name": "ochafik-ant"
}
],
"num_versions": 14,
"repository": {
"type": "git",
"url": "git+https://github.com/modelcontextprotocol/typescript-sdk.git"
},
"scripts": {
"build": "tsdown",
"build:watch": "tsdown --watch",
"check": "pnpm run typecheck && pnpm run lint",
"lint": "eslint src/ && prettier --ignore-path ../../.prettierignore --check .",
"lint:fix": "eslint src/ --fix && prettier --ignore-path ../../.prettierignore --write .",
"test": "vitest run",
"test:watch": "vitest",
"typecheck": "tsgo -p tsconfig.json --noEmit"
},
"signal_details": {
"license_changed": "'MIT' -> 'Apache-2.0'",
"shared_repo_different_publisher": "repo 'git+https://github.com/modelcontextprotocol/typescript-sdk.git' also claimed by 10 package(s) under different publishers: ['npm/@modelcontextprotocol/codemod', 'npm/@modelcontextprotocol/fastify', 'npm/@modelcontextprotocol/node'] ..."
},
"time": {
"created": "2026-04-01T14:46:13.598Z",
"modified": "2026-10-23T18:21:05.981Z"
}
}