Is @claude-flow/mcp safe to use?

@claude-flow/mcp has no known vulnerabilities on the latest version (3.0.0-alpha.8). DepScope rates its health at 55/100 (high risk).

What is the latest version of @claude-flow/mcp?

The latest version of @claude-flow/mcp is 3.0.0-alpha.8, released 2026-01-14.

No known vulnerabilities on the latest version of @claude-flow/mcp.

No, @claude-flow/mcp is actively maintained. Latest release: 3.0.0-alpha.8 (2026-01-14).

Popular alternatives to @claude-flow/mcp in npm include: ?., ansi-styles, brace-expansion, strip-ansi, lru-cache.

License information for @claude-flow/mcp is not declared in the registry metadata.

npmv3.0.0-alpha.8

Standalone MCP (Model Context Protocol) server - stdio/http/websocket transports, connection pooling, tool registry

3 versions1 maintainers5 deps10,599 weekly dl

/ 100

Health

safe to use

@claude-flow/[email protected] is safe to use (health: 55/100)

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

🌟

10/10typed

bundled

Dependencies (5)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@claude-flow/mcp