Is gitlab-mcp safe to use?

gitlab-mcp has no known vulnerabilities on the latest version (1.4.1). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of gitlab-mcp?

The latest version of gitlab-mcp is 1.4.1, released 2026-04-25.

Does gitlab-mcp have known vulnerabilities?

No known vulnerabilities on the latest version of gitlab-mcp.

Is gitlab-mcp deprecated?

No, gitlab-mcp is actively maintained. Latest release: 1.4.1 (2026-04-25).

What are alternatives to gitlab-mcp?

Popular alternatives to gitlab-mcp in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does gitlab-mcp use?

gitlab-mcp is licensed under MIT.

gitlab-mcp

npmv1.4.1

A MCP server for GitLab

License MITpermissive14 versions1 maintainers13 deps

mcpland/gitlab-mcp

/ 100

Health

use with caution

[email protected] low health (61/100) — consider alternatives

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (13)

@modelcontextprotocol/sdk dotenv express fetch-cookie graphql open picomatch pino pkce-challenge tough-cookie undici yaml zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/gitlab-mcp

gitlab-mcp

npmv1.4.1

A MCP server for GitLab

License MITpermissive14 versions1 maintainers13 deps

mcpland/gitlab-mcp

/ 100

Health

use with caution

[email protected] low health (61/100) — consider alternatives

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (13)

@modelcontextprotocol/sdk dotenv express fetch-cookie graphql open picomatch pino pkce-challenge tough-cookie undici yaml zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/gitlab-mcp