{"name":"io.github.YawLabs/mcp","slug":"yawlabs-mcp","title":null,"description":"One install, every MCP server, managed from yaw.sh/mcp. Runs locally: no account, no sign-in.","url":"https://mcp.market/server/yawlabs-mcp","rating":null,"grade":"C","score":57,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":34,"stars":1,"forks":4,"downloads_week":1392,"last_push_at":"2026-09-17T13:44:14.000Z","license":"NOASSERTION"},"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":null,"website":null,"version":"1.0.8","remotes":[],"packages":[{"registryType":"npm","identifier":"@yawlabs/mcp","version":"1.0.8","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":57,"grade":"C","scanned_at":"2026-09-19T00:27:01.236Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:27:01.202Z","components":{"code":{"score":3,"max":25,"notes":["5 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"install.curl-pipe","severity":"high","component":"code","title":"curl | sh in a script","evidence":"dist/chunk-A73UTVAV.js: …RSION = \"0.16.1\"; var OAM_INSTALL_SH = \"curl -fsSL https://oamjs.org/install.sh | sh\"; var OAM_INSTALL_PS1 = \"irm https://oa…"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: …dist\": \"npm run build && npm test\", \"preinstall\": \"node -e \\\"const major=Number(process.v…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@yawlabs/mcp","version":"1.0.8","found":true,"license":"SEE LICENSE IN LICENSE.md","hasInstallScripts":true,"dependencyCount":5,"publishedAt":"2026-09-17T13:47:06.775Z","repositoryUrl":"git+https://github.com/YawLabs/mcp.git","weeklyDownloads":1392}],"repo":{"found":true,"owner":"YawLabs","repo":"mcp","archived":false,"pushedAt":"2026-09-17T13:44:14Z","stars":1,"forks":4,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/260788729?v=4","ownerCreatedAt":"2026-02-11T00:00:33Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/260788729?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":4,"downloadsWeek":1392,"license":"NOASSERTION","lastPushAt":"2026-09-17T13:44:14.000Z","score":34}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 57: curl | sh in a script; npm install lifecycle script present; npm install lifecycle script present","createdAt":"2026-09-19T00:27:01.773Z"}],"reviews":[]}