← Home

@ansvar/chinese-law-mcp

npm Repository Homepage

Chinese law MCP server — 1,188 national laws, administrative regulations, and departmental rules with 62,981 provisions from NPC National Law Database (flk.npc.gov.cn) and CAC (cac.gov.cn). Full-text search, citation validation, legal stance builder. Part

2
Versions
Apache-2.0
License
Yes
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

ansvar

Keywords

mcpmodel-context-protocolaiclaudechinese-lawcybersecurity-lawpipldata-securitycompany-lawanti-monopolye-commercecivil-codechinalegalcomplianceansvar

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:mammoth AI (phantom-deps): mammoth is declared as a runtime dep and used in ingest scripts; phantom-dep heuristic false positive for this package. ai
install-scripts install-script:postinstall AI (install-scripts): Postinstall only runs 'tsc' build if dist is missing; no network access or arbitrary code execution. ai

Versions (showing 2 of 2)

Version Deps Published
3.0.0 3 / 10
1.1.2 2 / 9

v3.0.0

2 findings
HIGH Package has 'postinstall' script install-scripts

Script: test -d dist || npm run build || true

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.2

2 findings
HIGH Package has 'postinstall' script install-scripts

Script: test -d dist || npm run build || true

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.