@ansvar/mexican-law-mcp
Mexican federal law database covering data protection (LFPDPPP), fintech, cybercrime, commercial law, and consumer protection with Spanish full-text search
2
Versions
Apache-2.0
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
ansvar
Keywords
mcpmodel-context-protocolmexican-lawlfpdpppdata-protectionfintechcybercrimeinaiconsumer-protectionlegislationlegalcompliancelatin-americaansvar
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall only triggers a TypeScript build if dist/ is absent; no network fetch or arbitrary code execution. | ai |
v2.0.0
2 findings
HIGH
Package has 'postinstall' script
install-scripts
Script: test -d dist || npm run build || true
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.1
2 findings
HIGH
Package has 'postinstall' script
install-scripts
Script: test -d dist || npm run build || true
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.