v4.18.1 · scanned
0Critical
0High
0Medium
0Low
0Informational
No findings. mcp-scan did not flag anything in this report.
Notes
- Unverified package source
Server 'lodash' is an unscoped package from an unverified source (higher typosquatting risk).
Name-based heuristic, not evidence of a problem. Publishers can clear it with npm provenance.
A clean scan is static analysis of the published package, not a security guarantee.