Is @claude-flow/mcp safe to use?

@claude-flow/mcp has no known vulnerabilities on the latest version (3.0.0-alpha.8). DepScope rates its health at 51/100 (high risk).

What is the latest version of @claude-flow/mcp?

The latest version of @claude-flow/mcp is 3.0.0-alpha.8, released 2026-01-14.

Does @claude-flow/mcp have known vulnerabilities?

No known vulnerabilities on the latest version of @claude-flow/mcp.

Is @claude-flow/mcp deprecated?

No, @claude-flow/mcp is actively maintained. Latest release: 3.0.0-alpha.8 (2026-01-14).

What are alternatives to @claude-flow/mcp?

Popular alternatives to @claude-flow/mcp in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @claude-flow/mcp use?

License information for @claude-flow/mcp is not declared in the registry metadata.

@claude-flow/mcp

npmv3.0.0-alpha.8

Standalone MCP (Model Context Protocol) server - stdio/http/websocket transports, connection pooling, tool registry

3 versions1 maintainers5 deps9,951 weekly dl

/ 100

Health

safe to use

@claude-flow/[email protected] is safe to use (health: 51/100)

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

ws ajv cors helmet express

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@claude-flow/mcp