Is mcp-thorns safe to use?

mcp-thorns has no known vulnerabilities on the latest version (5.1.9). DepScope rates its health at 59/100 (high risk).

What is the latest version of mcp-thorns?

The latest version of mcp-thorns is 5.1.9, released 2026-04-16.

Does mcp-thorns have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-thorns.

Is mcp-thorns deprecated?

No, mcp-thorns is actively maintained. Latest release: 5.1.9 (2026-04-16).

What are alternatives to mcp-thorns?

Popular alternatives to mcp-thorns in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does mcp-thorns use?

mcp-thorns is licensed under MIT.

mcp-thorns

npmv5.1.9

Perfect one-shot codebase overview: project context, architecture flow, async/error patterns, dead code, internal call graph

License MITpermissive30 versions1 maintainers13 deps50 weekly dl

AnEntrypoint/mcp-thorns

/ 100

Health

use with caution

[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (13)

tree-sitter tree-sitter-javascript tree-sitter-typescript tree-sitter-python tree-sitter-rust tree-sitter-go tree-sitter-c tree-sitter-cpp tree-sitter-java tree-sitter-c-sharp tree-sitter-ruby tree-sitter-php tree-sitter-json

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-thorns