API Star

Plugin Hub MCP Server

@barnburner121/plugin-hub-mcp npm v4.2.2

Published by @barnburner121 — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.

View on npm ↗ Repository ↗ Raw report (JSON) ↗
Trust grade
A
94/100
Last scanned
Trust
A · 94/100
How safe the published surface and source look. Deterministic; every point is auditable.
Capability
Minimal
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
A Why this grade 100 − 6.3 = 94/100

Every server starts at 100. These are the exact deductions the deterministic engine applied — each one reproducible, none of it an opinion or an LLM's guess:

PointsWhat was foundCategory
−6.3 Package runs install-time scripts MTC-SUP-010 supply-chain

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind the deduction.

Findings 1

medium Package runs install-time scripts (postinstall)MTC-SUP-010

"@barnburner121/plugin-hub-mcp" executes postinstall script(s) at install time. The large majority of malicious packages abuse install hooks to run code before you ever import them.

Fix: Review the scripts; install with --ignore-scripts where possible and vet what they do.

Location: package @barnburner121/plugin-hub-mcp

What this scan could not see

Versions

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

VersionScoreFindingsEngineScanned
v4.2.2 latest A 94/100 1 1.5.0 2026-07-22

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

MCP Trust Score: A · 94/100
Markdown (GitHub README)
[![MCP Trust Score](https://mcptrustchecker.com/registry/barnburner121-plugin-hub-mcp/badge.svg)](https://mcptrustchecker.com/registry/barnburner121-plugin-hub-mcp)
HTML
<a href="https://mcptrustchecker.com/registry/barnburner121-plugin-hub-mcp"><img src="https://mcptrustchecker.com/registry/barnburner121-plugin-hub-mcp/badge.svg" alt="MCP Trust Score" height="20"></a>
Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/barnburner121-plugin-hub-mcp/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan @barnburner121/plugin-hub-mcp --online

Use the free API → How scoring works

More in Developer Tools

199bio Mcp Limitless npm
A
199bio-mcp-limitless-server

Security scan results for the 199bio Mcp Limitless MCP server.

Developer Tools Score 100/100 0 findings Cap. Minimal
1mcp npm
A
1mcp

Security scan results for the 1mcp MCP server.

Developer Tools Score 100/100 2 findings Cap. High
1stay Source verified npm
A
1stay-mcp

Security scan results for the 1stay MCP server.

Developer Tools Score 100/100 0 findings Cap. Minimal
21st.dev Magic npm
A
@21st-dev/magic

Generates production-ready UI components from natural language, inspired by v0.

Developer Tools Score 100/100 0 findings 9.5k/wk Cap. Minimal
2slides npm
A
2slides-mcp

Security scan results for the 2slides MCP server.

Developer Tools Score 100/100 0 findings Cap. Minimal
3d npm
A
@jagjerez-org/3d-mcp-server

Security scan results for the 3d MCP server.

Developer Tools Score 100/100 1 finding Cap. High