@cyanheads/nist-nvd-mcp-server 0.1.3 → 0.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/AGENTS.md +14 -14
  2. package/CLAUDE.md +14 -14
  3. package/README.md +7 -1
  4. package/changelog/0.1.x/0.1.4.md +25 -0
  5. package/changelog/0.1.x/0.1.5.md +17 -0
  6. package/dist/nist-nvd-mcp-server.mcpb +0 -0
  7. package/manifest.json +26 -0
  8. package/package.json +29 -18
  9. package/server.json +3 -3
package/AGENTS.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** nist-nvd-mcp-server
4
- **Version:** 0.1.3
4
+ **Version:** 0.1.5
5
5
  **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.9`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
@@ -293,23 +293,23 @@ When you complete a skill's checklist, check the boxes and add a completion time
293
293
 
294
294
  ## Commands
295
295
 
296
- **Runtime:** Scripts use `tsx` — both `npm run <cmd>` and `bun run <cmd>` work. `bun` is slightly faster for script invocation but not required.
296
+ **Runtime:** Scripts use Bun natively — use `bun run <cmd>` for all commands.
297
297
 
298
298
  | Command | Purpose |
299
299
  |:--------|:--------|
300
- | `npm run build` | Compile TypeScript |
301
- | `npm run rebuild` | Clean + build |
302
- | `npm run clean` | Remove build artifacts |
303
- | `npm run devcheck` | Lint + format + typecheck + security + changelog sync |
300
+ | `bun run build` | Compile TypeScript |
301
+ | `bun run rebuild` | Clean + build |
302
+ | `bun run clean` | Remove build artifacts |
303
+ | `bun run devcheck` | Lint + format + typecheck + security + changelog sync |
304
304
  | `bun run audit:refresh` | Delete `bun.lock`, reinstall, re-audit. Use when `devcheck` flags a transitive advisory — stale lockfile can mask already-patched deps. If advisory survives, it's real. |
305
- | `npm run tree` | Generate directory structure doc |
306
- | `npm run format` | Auto-fix formatting |
307
- | `npm test` | Run tests |
308
- | `npm run start:stdio` | Production mode (stdio) |
309
- | `npm run start:http` | Production mode (HTTP) |
310
- | `npm run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
311
- | `npm run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
312
- | `npm run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
305
+ | `bun run tree` | Generate directory structure doc |
306
+ | `bun run format` | Auto-fix formatting |
307
+ | `bun run test` | Run tests |
308
+ | `bun run start:stdio` | Production mode (stdio) |
309
+ | `bun run start:http` | Production mode (HTTP) |
310
+ | `bun run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
311
+ | `bun run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
312
+ | `bun run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
313
313
 
314
314
  ---
315
315
 
package/CLAUDE.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** nist-nvd-mcp-server
4
- **Version:** 0.1.3
4
+ **Version:** 0.1.5
5
5
  **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.9`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
@@ -293,23 +293,23 @@ When you complete a skill's checklist, check the boxes and add a completion time
293
293
 
294
294
  ## Commands
295
295
 
296
- **Runtime:** Scripts use `tsx` — both `npm run <cmd>` and `bun run <cmd>` work. `bun` is slightly faster for script invocation but not required.
296
+ **Runtime:** Scripts use Bun natively — use `bun run <cmd>` for all commands.
297
297
 
298
298
  | Command | Purpose |
299
299
  |:--------|:--------|
300
- | `npm run build` | Compile TypeScript |
301
- | `npm run rebuild` | Clean + build |
302
- | `npm run clean` | Remove build artifacts |
303
- | `npm run devcheck` | Lint + format + typecheck + security + changelog sync |
300
+ | `bun run build` | Compile TypeScript |
301
+ | `bun run rebuild` | Clean + build |
302
+ | `bun run clean` | Remove build artifacts |
303
+ | `bun run devcheck` | Lint + format + typecheck + security + changelog sync |
304
304
  | `bun run audit:refresh` | Delete `bun.lock`, reinstall, re-audit. Use when `devcheck` flags a transitive advisory — stale lockfile can mask already-patched deps. If advisory survives, it's real. |
305
- | `npm run tree` | Generate directory structure doc |
306
- | `npm run format` | Auto-fix formatting |
307
- | `npm test` | Run tests |
308
- | `npm run start:stdio` | Production mode (stdio) |
309
- | `npm run start:http` | Production mode (HTTP) |
310
- | `npm run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
311
- | `npm run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
312
- | `npm run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
305
+ | `bun run tree` | Generate directory structure doc |
306
+ | `bun run format` | Auto-fix formatting |
307
+ | `bun run test` | Run tests |
308
+ | `bun run start:stdio` | Production mode (stdio) |
309
+ | `bun run start:http` | Production mode (HTTP) |
310
+ | `bun run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
311
+ | `bun run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
312
+ | `bun run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
313
313
 
314
314
  ---
315
315
 
package/README.md CHANGED
@@ -7,7 +7,7 @@
7
7
 
8
8
  <div align="center">
9
9
 
10
- [![Version](https://img.shields.io/badge/Version-0.1.3-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/nist-nvd-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/nist-nvd-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/nist-nvd-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^5.9.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun->=1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
10
+ [![Version](https://img.shields.io/badge/Version-0.1.5-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/nist-nvd-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/nist-nvd-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/nist-nvd-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
11
11
 
12
12
  </div>
13
13
 
@@ -19,6 +19,12 @@
19
19
 
20
20
  </div>
21
21
 
22
+ <div align="center">
23
+
24
+ **Public Hosted Server:** [https://nist-nvd.caseyjhand.com/mcp](https://nist-nvd.caseyjhand.com/mcp)
25
+
26
+ </div>
27
+
22
28
  ---
23
29
 
24
30
  ## Tools
package/changelog/0.1.x/0.1.4.md ADDED
@@ -0,0 +1,25 @@
1
+ ---
2
+ summary: "Drop tsx, align all scripts to bun-native execution, revert Dockerfile to oven/bun:1.3, add funding block, bump typescript ^5.9.3 → ^6.0.3"
3
+ breaking: false
4
+ security: false
5
+ ---
6
+
7
+ # 0.1.4 — 2026-05-24
8
+
9
+ ## Changed
10
+
11
+ - **All `package.json` scripts** migrated from `tsx` to `bun run` — `build`, `rebuild`, `clean`, `devcheck`, `tree`, `list-skills`, `lint:mcp`, `lint:packaging`, `changelog:build`, `changelog:check`. Scripts now invoke Bun's native TS runner rather than the tsx shim.
12
+ - **`start` / `start:stdio` / `start:http` scripts** switched from `node dist/index.js` to `bun dist/index.js` / `bun ./dist/index.js`.
13
+ - **`test` script** changed from `vitest run` to `bunx vitest run`.
14
+ - **`Dockerfile`** reverted from `node:24-slim` (which required an extra `npm install -g bun` step and used `./node_modules/.bin/tsx`) back to `oven/bun:1.3`. Build command simplified to `bun run build`.
15
+ - **`typescript`** bumped `^5.9.3 → ^6.0.3`.
16
+ - **`engines.bun`** tightened to `>=1.3.2` (matches `packageManager`).
17
+
18
+ ## Removed
19
+
20
+ - **`tsx`** removed from `devDependencies` — replaced by Bun's native TS execution.
21
+
22
+ ## Added
23
+
24
+ - **`funding` block** added to `package.json` (GitHub Sponsors + Buy Me a Coffee).
25
+ - **`packageManager: bun@1.3.2`** declared in `package.json`.
package/changelog/0.1.x/0.1.5.md ADDED
@@ -0,0 +1,17 @@
1
+ ---
2
+ summary: "FUNDING.yml, hosted server URL, Bun badge fix, manifest.json in files array"
3
+ breaking: false
4
+ security: false
5
+ ---
6
+
7
+ # 0.1.5 — 2026-05-26
8
+
9
+ ## Added
10
+
11
+ - **`.github/FUNDING.yml`** — GitHub Sponsors + Buy Me a Coffee funding config.
12
+ - **Hosted server URL** — README now links to `https://nist-nvd.caseyjhand.com/mcp`.
13
+
14
+ ## Fixed
15
+
16
+ - **Bun badge** — corrected from `>=1.3.2` to `v1.3.2` to match ecosystem convention.
17
+ - **`manifest.json`** — added to `package.json` `files` array so it ships with the npm package; version bumped from stale `0.1.3` to `0.1.5`.
package/dist/nist-nvd-mcp-server.mcpb ADDED
Binary file
package/manifest.json ADDED
@@ -0,0 +1,26 @@
1
+ {
2
+ "manifest_version": "0.3",
3
+ "name": "nist-nvd-mcp-server",
4
+ "version": "0.1.5",
5
+ "description": "Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.",
6
+ "author": { "name": "cyanheads" },
7
+ "server": {
8
+ "type": "node",
9
+ "entry_point": "dist/index.js",
10
+ "mcp_config": {
11
+ "command": "node",
12
+ "args": ["${__dirname}/dist/index.js"],
13
+ "env": {
14
+ "MCP_TRANSPORT_TYPE": "stdio",
15
+ "MCP_AUTH_MODE": "none",
16
+ "NODE_ENV": "production"
17
+ }
18
+ }
19
+ },
20
+ "compatibility": {
21
+ "runtimes": { "node": ">=24.0.0" }
22
+ },
23
+ "tools_generated": true,
24
+ "prompts_generated": true,
25
+ "user_config": {}
26
+ }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@cyanheads/nist-nvd-mcp-server",
3
3
  "mcpName": "io.github.cyanheads/nist-nvd-mcp-server",
4
- "version": "0.1.3",
4
+ "version": "0.1.5",
5
5
  "description": "Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.",
6
6
  "type": "module",
7
7
  "main": "dist/index.js",
@@ -17,26 +17,27 @@
17
17
  "CLAUDE.md",
18
18
  "AGENTS.md",
19
19
  "Dockerfile",
20
+ "manifest.json",
20
21
  "server.json"
21
22
  ],
22
23
  "scripts": {
23
- "build": "tsx scripts/build.ts",
24
- "rebuild": "tsx scripts/clean.ts && tsx scripts/build.ts",
25
- "clean": "tsx scripts/clean.ts",
26
- "devcheck": "tsx scripts/devcheck.ts",
24
+ "build": "bun run scripts/build.ts",
25
+ "rebuild": "bun run scripts/clean.ts && bun run build",
26
+ "clean": "bun run scripts/clean.ts",
27
+ "devcheck": "bun run scripts/devcheck.ts",
27
28
  "audit:refresh": "rm -f bun.lock && bun install && bun audit",
28
- "tree": "tsx scripts/tree.ts",
29
- "list-skills": "tsx scripts/list-skills.ts",
29
+ "tree": "bun run scripts/tree.ts",
30
+ "list-skills": "bun run scripts/list-skills.ts",
30
31
  "format": "biome check --write --unsafe .",
31
- "lint:mcp": "tsx scripts/lint-mcp.ts",
32
- "lint:packaging": "tsx scripts/lint-packaging.ts",
32
+ "lint:mcp": "bun run scripts/lint-mcp.ts",
33
+ "lint:packaging": "bun run scripts/lint-packaging.ts",
33
34
  "bundle": "bun run build && npx -y @anthropic-ai/mcpb pack . dist/nist-nvd-mcp-server.mcpb",
34
- "changelog:build": "tsx scripts/build-changelog.ts",
35
- "changelog:check": "tsx scripts/build-changelog.ts --check",
36
- "test": "vitest run",
37
- "start": "node dist/index.js",
38
- "start:stdio": "MCP_TRANSPORT_TYPE=stdio node dist/index.js",
39
- "start:http": "MCP_TRANSPORT_TYPE=http node dist/index.js"
35
+ "changelog:build": "bun run scripts/build-changelog.ts",
36
+ "changelog:check": "bun run scripts/build-changelog.ts --check",
37
+ "test": "bunx vitest run",
38
+ "start": "bun dist/index.js",
39
+ "start:stdio": "MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js",
40
+ "start:http": "MCP_TRANSPORT_TYPE=http bun ./dist/index.js"
40
41
  },
41
42
  "keywords": [
42
43
  "mcp",
@@ -65,9 +66,20 @@
65
66
  "url": "https://github.com/cyanheads/nist-nvd-mcp-server/issues"
66
67
  },
67
68
  "author": "cyanheads <casey@caseyjhand.com> (https://github.com/cyanheads/nist-nvd-mcp-server#readme)",
69
+ "funding": [
70
+ {
71
+ "type": "github",
72
+ "url": "https://github.com/sponsors/cyanheads"
73
+ },
74
+ {
75
+ "type": "buy_me_a_coffee",
76
+ "url": "https://www.buymeacoffee.com/cyanheads"
77
+ }
78
+ ],
68
79
  "license": "Apache-2.0",
80
+ "packageManager": "bun@1.3.2",
69
81
  "engines": {
70
- "bun": ">=1.3.0",
82
+ "bun": ">=1.3.2",
71
83
  "node": ">=24.0.0"
72
84
  },
73
85
  "publishConfig": {
@@ -84,8 +96,7 @@
84
96
  "depcheck": "^1.4.7",
85
97
  "ignore": "^7.0.5",
86
98
  "tsc-alias": "^1.8.16",
87
- "tsx": "^4.19.0",
88
- "typescript": "^5.9.3",
99
+ "typescript": "^6.0.3",
89
100
  "vitest": "^4.1.0"
90
101
  }
91
102
  }
package/server.json CHANGED
@@ -6,14 +6,14 @@
6
6
  "url": "https://github.com/cyanheads/nist-nvd-mcp-server",
7
7
  "source": "github"
8
8
  },
9
- "version": "0.1.3",
9
+ "version": "0.1.5",
10
10
  "packages": [
11
11
  {
12
12
  "registryType": "npm",
13
13
  "registryBaseUrl": "https://registry.npmjs.org",
14
14
  "identifier": "@cyanheads/nist-nvd-mcp-server",
15
15
  "runtimeHint": "bun",
16
- "version": "0.1.3",
16
+ "version": "0.1.5",
17
17
  "packageArguments": [
18
18
  {
19
19
  "type": "positional",
@@ -55,7 +55,7 @@
55
55
  "registryBaseUrl": "https://registry.npmjs.org",
56
56
  "identifier": "@cyanheads/nist-nvd-mcp-server",
57
57
  "runtimeHint": "bun",
58
- "version": "0.1.3",
58
+ "version": "0.1.5",
59
59
  "packageArguments": [
60
60
  {
61
61
  "type": "positional",