@xpoz/xpoz

Independent MCP server safety profile · methodology

Safe to install · safety score 86/100
—npm downloads/wk
6dsince last publish
v0.6.10latest version
✓provenance

Safety signals

Install script (code on npm i)no
Repository (source to review)https://github.com/XPOZpublic/xpoz-ts-sdk
LicenseMIT
Direct dependencies2
Last audited2026-07-08

Flags

lowМало загрузок — новый или невостребованный; меньше глаз проверяло.
Verify @xpoz/xpoz live right now — free: GET /mcp/verify?package=%40xpoz%2Fxpoz. See the whole ecosystem in the State of MCP Security report, or browse all audited servers.

Поддерживается, без опасных install-скриптов — можно ставить. Data from PulseFeed's independent MCP audit (last crawl 2026-07-08). An install script is not automatically malicious — native builds use them — but each is an unreviewed code-execution vector worth checking. All audited MCP servers →