@intlayer/mcp
Intlayer MCP server. Handle MCP to help IDE to use Intlayer. It build, fill, pull, push, dictionaries
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ay.pineau
Keywords
intlayermcpmcp-servermcp-proxydocumentationclimcp-lspmcp-language-server
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/esm/installSkills-Bzx_k5dj.mjs | AI (source-diff): Minified build artifact, readable logic, no obfuscation signature. | ai | |
| source-diff | obfuscated-file:dist/esm/installSkills-fT8EtlY8.mjs | AI (source-diff): Minified bundle output implementing local asset resolution logic; benign. | ai | |
| source-diff | obfuscated-file:dist/esm/cli-C5nRaDjk.mjs | AI (source-diff): tsdown/bun minified build output, not true obfuscation; no malicious behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/esm/packages/@intlayer/chokidar/dist/esm/installSkills/index.mjs | AI (source-diff): Minified bundler output implementing a documented skills-installer, not true obfuscation or malicious behavior. | ai | |
| phantom-deps | phantom-dep:@intlayer/cli | AI (phantom-deps): Same-org sibling package, false positive. | ai | |
| phantom-deps | phantom-dep:@intlayer/docs | AI (phantom-deps): Same-org sibling package, false positive. | ai | |
| phantom-deps | phantom-dep:@intlayer/types | AI (phantom-deps): Same-org sibling package, false positive. | ai | |
| phantom-deps | phantom-dep:@intlayer/config | AI (phantom-deps): Same-org sibling package, false positive. | ai | |
| phantom-deps | phantom-dep:@intlayer/api | AI (phantom-deps): Same-org sibling package, false positive. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Referenced via config, common monorepo pattern. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Referenced via config, common monorepo pattern. | ai | |
| phantom-deps | phantom-dep:dotenv | AI (phantom-deps): Referenced via config, common monorepo pattern. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are same-org sibling packages at matching version, not third-party additions. | ai | |
| provenance | missing-githead | AI (provenance): Monorepo publish pipeline quirk, no malicious behavior; consistent across sibling packages. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Monorepo bundling of sibling packages (cli/docs) into dist, not injected code. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Bundled dependency sources inflate size; consistent with monorepo dist structure. | ai | |
| dependencies | unvetted-dep:@intlayer/engine | AI (dependencies): First-party sibling package in same monorepo/publisher scope. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped @intlayer/* package in an established monorepo; Levenshtein match to 'yup' is a false positive. | ai | |
| dependencies | unvetted-dep:@intlayer/docs | AI (dependencies): First-party monorepo sibling dependency, same version pin. | ai | |
| dependencies | unvetted-dep:@intlayer/cli | AI (dependencies): First-party monorepo sibling dependency, same version pin. | ai | |
| dependencies | unvetted-dep:@intlayer/api | AI (dependencies): First-party monorepo sibling dependency, same version pin. | ai | |
| dependencies | unvetted-dep:@intlayer/chokidar | AI (dependencies): First-party monorepo sibling dependency, same version pin. | ai |
Versions (showing 51 of 138)
| Version | Deps | Published |
|---|---|---|
| 9.0.0 | 12 / 9 | |
| 8.12.4 | 12 / 9 | |
| 8.12.3 | 12 / 9 | |
| 8.12.2 | 12 / 9 | |
| 8.12.1 | 12 / 9 | |
| 8.12.0 | 12 / 9 | |
| 8.11.3 | 12 / 9 | |
| 8.11.2 | 12 / 9 | |
| 8.11.1 | 12 / 9 | |
| 8.11.0 | 12 / 9 | |
| 8.10.1 | 11 / 9 | |
| 8.10.0 | 11 / 9 | |
| 8.9.8 | 11 / 9 | |
| 8.9.7 | 11 / 9 | |
| 8.9.6 | 11 / 9 | |
| 8.9.5 | 9 / 10 | |
| 8.9.4 | 9 / 10 | |
| 8.9.3 | 10 / 11 | |
| 8.9.2 | 10 / 11 | |
| 8.9.1 | 10 / 11 | |
| 8.9.0 | 10 / 11 | |
| 8.8.0 | 10 / 11 | |
| 8.7.14 | 10 / 11 | |
| 8.7.13 | 10 / 11 | |
| 8.7.12 | 10 / 11 | |
| 8.7.11 | 10 / 11 | |
| 8.7.10 | 10 / 11 | |
| 8.7.9 | 10 / 11 | |
| 8.7.8 | 10 / 11 | |
| 8.7.7 | 10 / 11 | |
| 8.7.6 | 10 / 11 | |
| 8.7.5 | 10 / 11 | |
| 8.7.4 | 10 / 11 | |
| 8.7.2 | 10 / 11 | |
| 8.7.1 | 10 / 11 | |
| 8.7.0 | 10 / 11 | |
| 8.6.10 | 10 / 11 | |
| 8.6.9 | 10 / 11 | |
| 8.6.8 | 10 / 11 | |
| 8.6.7 | 10 / 11 | |
| 8.6.6 | 10 / 11 | |
| 8.6.5 | 10 / 11 | |
| 8.6.4 | 10 / 11 | |
| 8.6.3 | 10 / 11 | |
| 8.6.2 | 10 / 11 | |
| 8.6.1 | 10 / 11 | |
| 8.6.0 | 10 / 11 | |
| 8.5.2 | 10 / 11 | |
| 8.5.1 | 10 / 11 | |
| 8.5.0 | 10 / 11 | |
| 8.4.10 | 9 / 11 |
v9.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.