Mcp-audit version 0.18.0 adds a lockfile for MCP servers, addressing unpinned npx dependencies that fetch whatever version the npm registry calls latest on every tool start, according to the tool's au…
A developer has built a suite of open-source tools arguing that verification, not generation, is the hard problem in trustworthy AI infrastructure. The projects include vaultrag, a permission-aware re…
A developer who contributed to open-source compilers and networking systems through Google Summer of Code, the Linux Foundation's LFX mentorship program, and Symmetry Autumn of Code has shipped a suit…
Developer alih552 released mcp-audit, a zero-dependency CLI tool that scans MCP server configurations for security issues, after a 2026 analysis of ~7,000 public MCP servers found 41% require no authe…