{"name":"io.github.jfarcand/mirroir-mcp","slug":"jfarcand-mirroir-mcp","title":null,"description":"Control a real iPhone through macOS iPhone Mirroring: screenshot, tap, swipe, type.","url":"https://mcp.market/server/jfarcand-mirroir-mcp","rating":null,"grade":"C","score":58,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":49,"stars":222,"forks":33,"downloads_week":202,"last_push_at":"2026-09-13T22:05:34.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/jfarcand/mirroir-mcp","website":null,"version":"0.39.0","remotes":[],"packages":[{"registryType":"npm","identifier":"mirroir-mcp","version":"0.39.0","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":58,"grade":"C","scanned_at":"2026-09-20T20:12:45.417Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T20:12:45.360Z","components":{"code":{"score":3,"max":25,"notes":["5 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 7 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"install.js: …{ // Extract mirroir-mcp binary execSync(`tar xzf \"${tmpFile}\" -C \"${binDir}\"`, { stdio: \"inherit\" }); /…"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: …in/mirroir-mcp\" }, \"scripts\": { \"postinstall\": \"node install.js\" }, \"files\": [ …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"mirroir-mcp","version":"0.39.0","found":true,"license":"Apache-2.0","hasInstallScripts":true,"dependencyCount":0,"publishedAt":"2026-09-01T00:51:34.755Z","repositoryUrl":"git+https://github.com/jfarcand/mirroir-mcp.git","weeklyDownloads":202}],"repo":{"found":true,"owner":"jfarcand","repo":"mirroir-mcp","archived":false,"pushedAt":"2026-09-13T22:05:34Z","stars":222,"forks":33,"openIssues":15,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/51285?v=4","ownerCreatedAt":"2009-02-03T02:05:59Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/51285?v=4&s=128","source":"github"},"presence":{"stars":222,"forks":33,"downloadsWeek":202,"license":"Apache-2.0","lastPushAt":"2026-09-13T22:05:34.000Z","score":49}}}},"grade_history":[],"reviews":[]}