mcp-scorecard 0.5.6 → 0.5.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -30,6 +30,11 @@
30
30
 
31
31
  # Changelog
32
32
 
33
+ ## 0.5.7
34
+
35
+ - Security: raise `hono` override to **4.13.1** (clears moderate MCP SDK transitive advisories); `@hono/node-server@2.1.0`.
36
+
37
+
33
38
  ## Unreleased
34
39
 
35
40
  ### Fixes
@@ -3,7 +3,7 @@
3
3
  * same string. Bumping this without updating package.json is intentional during
4
4
  * dev (keep src as source of truth); a release script can sync them.
5
5
  */
6
- export declare const SERVER_VERSION = "0.5.6";
6
+ export declare const SERVER_VERSION = "0.5.7";
7
7
  /** Identifier used when the probe connects to a target MCP server. */
8
8
  export declare const PROBE_CLIENT_NAME = "mcp-scorecard";
9
9
  /** Env var set on the spawned target so MCP authors can detect we are probing
package/dist/constants.js CHANGED
@@ -3,7 +3,7 @@
3
3
  * same string. Bumping this without updating package.json is intentional during
4
4
  * dev (keep src as source of truth); a release script can sync them.
5
5
  */
6
- export const SERVER_VERSION = "0.5.6";
6
+ export const SERVER_VERSION = "0.5.7";
7
7
  /** Identifier used when the probe connects to a target MCP server. */
8
8
  export const PROBE_CLIENT_NAME = 'mcp-scorecard';
9
9
  /** Env var set on the spawned target so MCP authors can detect we are probing
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mcp-scorecard",
3
- "version": "0.5.6",
3
+ "version": "0.5.7",
4
4
  "mcpName": "io.github.davidmosiah/mcp-scorecard",
5
5
  "description": "Grade any MCP server's agent-readiness in one command \u2014 stdio (10 protocol checks) AND hosted/remote servers (10 security + web agent-readiness checks). Open source, local-first, no credentials.",
6
6
  "type": "module",
@@ -48,6 +48,7 @@
48
48
  "dependencies": {
49
49
  "@modelcontextprotocol/sdk": "^1.21.0",
50
50
  "ajv": "^8.17.1",
51
+ "ip-address": "^10.4.0",
51
52
  "zod": "^4.4.1"
52
53
  },
53
54
  "devDependencies": {
@@ -72,8 +73,8 @@
72
73
  },
73
74
  "main": "dist/index.js",
74
75
  "overrides": {
75
- "hono": "4.12.27",
76
+ "hono": "4.13.1",
76
77
  "esbuild": "0.28.1",
77
- "@hono/node-server": "2.0.12"
78
+ "@hono/node-server": "2.1.0"
78
79
  }
79
80
  }