mcp-scan / check
mcp-scan / check
npm package 'null' has not been updated in over 6 months.
Package 'null' has no public repository URL linked.
Server 'null' is an unscoped package from an unverified source (higher typosquatting risk).
Name-based heuristic, not evidence of a problem. Publishers can clear it with npm provenance.
A clean scan is static analysis of the published package, not a security guarantee.