{"name":"io.github.jgravelle/jcodemunch-mcp","slug":"jgravelle-jcodemunch-mcp","title":"jCodemunch MCP","description":"Token-efficient code exploration via tree-sitter AST parsing. 70+ languages, 86-99% token savings.","url":"https://mcp.market/server/jgravelle-jcodemunch-mcp","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":67,"stars":2699,"forks":370,"downloads_week":5986,"last_push_at":"2026-09-19T06:47:22.000Z","license":"NOASSERTION"},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/jgravelle/jcodemunch-mcp","website":null,"version":"1.108.319","remotes":[],"packages":[{"registryType":"pypi","identifier":"jcodemunch-mcp","version":"1.108.319","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-19T09:59:12.201Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T09:59:12.149Z","components":{"code":{"score":8,"max":25,"notes":["346 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"jcodemunch_mcp-1.108.319/harness/__main__.py: …]: t0 = time.perf_counter() e = dict(os.environ) e.setdefault(\"PYTHONPATH\", str(REPO…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"jcodemunch_mcp-1.108.319/src/jcodemunch_mcp/server.py: …nged files → catch hardcoded secrets or eval() calls in the diff. \"\"\" _TRIAGE_PROMPT…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"jcodemunch-mcp","version":"1.108.319","found":true,"weeklyDownloads":5986,"license":"LicenseRef-jCodeMunch-Dual-Use-1","dependencyCount":45,"publishedAt":"2026-09-16T11:38:32.857804Z","repositoryUrl":"https://github.com/jgravelle/jcodemunch-mcp"}],"repo":{"found":true,"owner":"jgravelle","repo":"jcodemunch-mcp","archived":false,"pushedAt":"2026-09-19T06:47:22Z","stars":2699,"forks":370,"openIssues":18,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/3400540?v=4","ownerCreatedAt":"2013-01-27T23:59:07Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/3400540?v=4&s=128","source":"github"},"presence":{"stars":2699,"forks":370,"downloadsWeek":5986,"license":"NOASSERTION","lastPushAt":"2026-09-19T06:47:22.000Z","score":67}}}},"grade_history":[],"reviews":[]}