modelcontextprotocol / inspector
Repository health
Security, maintenance, dependencies and license for modelcontextprotocol/inspector.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 6.8/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependencies21/34 actions pinned to SHAs6/10
- Code review before mergeOnly 1/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 1 of 1 external pull requests merged (100% of those decided), median 73.2 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 0
- 0 stale (60+ days, no update in 30)
- Merged
- 30
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
None from people in recent pull requests.
Recently merged
- #2769 chore(release): merge v2/main into main for v2.12.0cliffhall · merged 21 Oct 2026
- #2777 fix(core): keep the connection up when a request POST is HTTP-refusedcliffhall · merged 21 Oct 2026
- #2775 fix(mcpdo): give resources/directory/read a URI and a cursorcliffhall · merged 21 Oct 2026
- #2774 fix(web): drop the dropped body's framing headers from an oversize error relaycliffhall · merged 21 Oct 2026
- #2773 fix(cli): link https in --print-handoff when the web UI is served over TLScliffhall · merged 21 Oct 2026
The 30 most recently updated pull requests.
Top contributors
Of the 100 most recent commits.
Issues
- Open
- 26
- issues and pull requests, as GitHub counts them
- Median time to close
- 4 days
- from 44 closed of the 69 latest
- Awaiting first reply
- 12
- of 25 open among the 69 latest
- Oldest open
- 275 days
Rates come from the 69 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 25 deps checked · 0 potential conflicts.