Paraphern

Paraphern/rugsnare

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

5 good first / help-wanted issues · JavaScript · last activity Oct 18, 2026

3 stars 1 forks 3 watchers JavaScript Apache License 2.0
ai-agents audit canary ci devsecops devtools integrity mcp mcp-server model-context-protocol rug-pull security supply-chain tool-poisoning zero-dependencies
View on GitHub Website
5 Open Issues Need Help Last updated: Oct 18, 2026

Open Issues Need Help

View All on GitHub
Translate llms-install.md to Chinese and Japanese 9 days ago
help wanted good first issue
Paraphern/rugsnare
3

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

JavaScript
#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp#mcp-server#model-context-protocol#rug-pull#security#supply-chain#tool-poisoning#zero-dependencies
Add integration tests for remote (HTTP/SSE) MCP servers 9 days ago
help wanted good first issue
Paraphern/rugsnare
3

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

JavaScript
#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp#mcp-server#model-context-protocol#rug-pull#security#supply-chain#tool-poisoning#zero-dependencies
Add GitHub Actions workflow example for PR contract review 9 days ago
help wanted good first issue
Paraphern/rugsnare
3

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

JavaScript
#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp#mcp-server#model-context-protocol#rug-pull#security#supply-chain#tool-poisoning#zero-dependencies
Add --json output format to skills report 9 days ago
help wanted good first issue
Paraphern/rugsnare
3

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

JavaScript
#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp#mcp-server#model-context-protocol#rug-pull#security#supply-chain#tool-poisoning#zero-dependencies
Add rugsnare to Homebrew (macOS/Linux package manager) 9 days ago
help wanted good first issue
Paraphern/rugsnare
3

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside

JavaScript
#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp#mcp-server#model-context-protocol#rug-pull#security#supply-chain#tool-poisoning#zero-dependencies