@modelcontextprotocol/server-sheet-music
MCP App Server for rendering and playing sheet music from ABC notation
20
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
jspahrsummerspcarletonfweinbergerthedspashwin-antochafik-ant
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Zod is directly used for validation in server code; false positive. | ai | |
| phantom-deps | phantom-dep:cors | AI (phantom-deps): CORS is directly used in Express server; false positive. | ai | |
| phantom-deps | phantom-dep:abcjs | AI (phantom-deps): Abcjs is the core library for sheet music rendering; false positive. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Express is the HTTP server framework; false positive. | ai | |
| phantom-deps | phantom-dep:@modelcontextprotocol/ext-apps | AI (phantom-deps): Org-scoped dependency from same org; false positive. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Legitimate MCP server package; README and metadata issues are cosmetic. | ai |