60
grade C
10 days ago
glama
opensrc-mcp
A codemode MCP server for fetching and querying dependency source code from npm, PyPI, crates.io, and GitHub. It allows agents to execute server-side JavaScript for context-efficient searching and browsing of large codebases without overwhelming the LLM's context window.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
OPENSRC_DIR— Override with $ or $XDG_DATA_HOME.config
XDG_DATA_HOME— Override with $OPENSRC_DIR or $.// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/dmmulroy-opensrc-mcp-bwa84y)commit: 43c45b2cbe0e64fb7859164a28e29da427c37930
code hash: eef0a4149d7d6e73f57b3f34d570308c621d13075229dcf623b69478061d8840
verified: 4/11/2026, 3:20:02 PM