{
  "verdict": "warnings",
  "target": {
    "cacheKey": "github:modelcontextprotocol/servers@d73f99efbfd40c3aa1b61e88728b3d49fb52608f",
    "host": "github",
    "owner": "modelcontextprotocol",
    "name": "servers",
    "requestedRef": "",
    "sha": "d73f99efbfd40c3aa1b61e88728b3d49fb52608f",
    "defaultBranch": "main"
  },
  "summary": null,
  "summary_model": null,
  "findings": [
    {
      "check": "agent-config",
      "severity": "warning",
      "concern": "agent-config:MCP server registration",
      "statement": "The repository ships 1 MCP server registration. A harness that indexes a cloned working tree can pick these up without any install step being run.",
      "evidence": ".mcp.json",
      "method": "tree"
    },
    {
      "check": "agent-config",
      "severity": "note",
      "concern": "agent-config:agent instruction file",
      "statement": "The repository ships 2 agent instruction files. A harness that indexes a cloned working tree can pick these up without any install step being run.",
      "evidence": "CLAUDE.md, src/everything/AGENTS.md",
      "method": "tree"
    },
    {
      "check": "unauditable-surface",
      "severity": "clean",
      "concern": "unauditable-surface:census",
      "statement": "Every one of the 156 files in the repository is readable text.",
      "evidence": "file listing at the analysed commit",
      "method": "tree"
    },
    {
      "check": "install-path",
      "severity": "clean",
      "concern": "install-path:lifecycle-scripts",
      "statement": "The package manifest declares no preinstall, install, postinstall or prepare script, so a package manager install does not execute code from this package.",
      "evidence": "package.json scripts",
      "method": "file"
    },
    {
      "check": "trust-root",
      "severity": "clean",
      "concern": "trust-root:activity",
      "statement": "The last push was 3 days ago (2026-09-03).",
      "evidence": "GitHub repository pushed_at field",
      "method": "api"
    },
    {
      "check": "trust-root",
      "severity": "clean",
      "concern": "trust-root:concentration",
      "statement": "Among the 100 most active contributors, the busiest (olaservo) accounts for about 21% of commits.",
      "evidence": "GitHub contributors API, first page",
      "method": "api"
    }
  ],
  "not_checked": [
    "OpenSSF Scorecard has no published result for this repository, so its maintenance-hygiene score is not shown.",
    "Nothing was executed. The installer was not run, the package was not installed, and no binary was launched, so every statement here is about what the code says it does rather than what it did.",
    "Install scripts hosted outside this repository were not fetched. Only scripts committed to the repository itself are read."
  ],
  "prose_excerpts": [],
  "scorecard": null,
  "stats": {
    "filesInTree": 156,
    "totalBytes": 1499188,
    "opaqueBytes": 0,
    "filesFetched": 5,
    "fetchBudgetExhausted": false
  },
  "generated_at": "2026-09-05T15:47:13.873Z"
}