Is mcp-server-framework safe to use?

mcp-server-framework has no known vulnerabilities on the latest version (1.2.0). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of mcp-server-framework?

The latest version of mcp-server-framework is 1.2.0, released 2026-08-11.

Does mcp-server-framework have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-server-framework.

Is mcp-server-framework deprecated?

No, mcp-server-framework is actively maintained. Latest release: 1.2.0 (2026-08-11).

What are alternatives to mcp-server-framework?

Popular alternatives to mcp-server-framework in npm include: ?, semver, minimatch, debug, ansi-styles.

What license does mcp-server-framework use?

mcp-server-framework is licensed under LGPL-3.0.

mcp-server-framework

npmv1.2.0

Production-ready MCP Server Framework with built-in logging, metrics, sessions, and multi-transport support.

License LGPL-3.0weak copyleft10 versions1 maintainers11 deps103 weekly dl

MP-Tool/mcp-server-framework

/ 100

Health

use with caution

[email protected] low health (61/100) — consider alternatives

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (11)

@modelcontextprotocol/sdk @opentelemetry/api cors dotenv express express-rate-limit helmet jose smol-toml yaml zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-server-framework

mcp-server-framework

npmv1.2.0

Production-ready MCP Server Framework with built-in logging, metrics, sessions, and multi-transport support.

License LGPL-3.0weak copyleft10 versions1 maintainers11 deps103 weekly dl

MP-Tool/mcp-server-framework

/ 100

Health

use with caution

[email protected] low health (61/100) — consider alternatives

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (11)

@modelcontextprotocol/sdk @opentelemetry/api cors dotenv express express-rate-limit helmet jose smol-toml yaml zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-server-framework