@n24q02m/better-email-mcp
Better MCP server for Email (IMAP/SMTP) with composite tools optimized for AI agents
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:dll-hijacking-commands | AI (semgrep): Fires on minified bundle boilerplate (Object.create/defineProperty); no actual DLL side-loading present in this package. | ai | |
| phantom-deps | phantom-dep:better-sqlite3 | AI (phantom-deps): better-sqlite3 is a declared runtime dep added in this version; likely used via @n24q02m/mcp-core indirectly. | ai | |
| source-diff | encoded-string-file:bin/cli.mjs | AI (source-diff): Long strings are minified marked/bundled output, not obfuscated payloads; stable pattern for this package. | ai | |
| provenance | slsa-provenance | AI (provenance): Package consistently published via CI/CD with Sigstore attestation; stable signal for this package. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Fires inside bundled marked.js library code, not package logic; stable false positive. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires inside bundled postcss/parser code in cli.mjs bundle; not package-authored code. | ai |
Versions (showing 73 of 73)
| Version | Deps | Published |
|---|---|---|
| 1.36.0 | 8 / 14 | |
| 1.35.0 | 8 / 14 | |
| 1.34.1 | 8 / 14 | |
| 1.34.0 | 8 / 14 | |
| 1.33.0 | 8 / 14 | |
| 1.32.2 | 8 / 12 | |
| 1.32.1 | 8 / 12 | |
| 1.32.0 | 8 / 12 | |
| 1.31.3 | 8 / 12 | |
| 1.31.2 | 8 / 12 | |
| 1.31.1 | 8 / 12 | |
| 1.31.0 | 8 / 12 | |
| 1.30.0 | 8 / 12 | |
| 1.29.0 | 8 / 12 | |
| 1.28.0 | 8 / 12 | |
| 1.27.0 | 8 / 12 | |
| 1.26.3 | 8 / 12 | |
| 1.26.2 | 8 / 12 | |
| 1.26.1 | 8 / 12 | |
| 1.26.0 | 8 / 12 | |
| 1.25.2 | 8 / 12 | |
| 1.25.1 | 8 / 12 | |
| 1.25.0 | 8 / 12 | |
| 1.24.0 | 8 / 12 | |
| 1.23.9 | 8 / 12 | |
| 1.23.8 | 8 / 12 | |
| 1.23.7 | 8 / 12 | |
| 1.23.6 | 8 / 12 | |
| 1.23.5 | 8 / 12 | |
| 1.23.4 | 8 / 12 | |
| 1.23.2 | 8 / 12 | |
| 1.23.1 | 8 / 12 | |
| 1.23.0 | 8 / 12 | |
| 1.22.6 | 8 / 12 | |
| 1.22.5 | 8 / 12 | |
| 1.22.4 | 8 / 12 | |
| 1.22.3 | 9 / 12 | |
| 1.22.2 | 9 / 12 | |
| 1.22.1 | 9 / 12 | |
| 1.22.0 | 8 / 12 | |
| 1.21.0 | 10 / 13 | |
| 1.19.0 | 10 / 13 | |
| 1.17.0 | 10 / 13 | |
| 1.14.0 | 7 / 12 | |
| 1.13.0 | 7 / 12 | |
| 1.12.0 | 7 / 12 | |
| 1.11.0 | 7 / 12 | |
| 1.10.1 | 7 / 12 | |
| 1.10.0 | 7 / 12 | |
| 1.9.0 | 7 / 12 | |
| 1.8.0 | 7 / 12 | |
| 1.7.0 | 7 / 12 | |
| 1.6.0 | 7 / 12 | |
| 1.5.0 | 7 / 12 | |
| 1.4.7 | 6 / 11 | |
| 1.4.6 | 6 / 11 | |
| 1.4.5 | 6 / 11 | |
| 1.4.4 | 6 / 11 | |
| 1.4.3 | 6 / 11 | |
| 1.4.2 | 6 / 11 | |
| 1.4.1 | 6 / 11 | |
| 1.4.0 | 6 / 11 | |
| 1.3.0 | 6 / 11 | |
| 1.2.5 | 6 / 11 | |
| 1.2.4 | 6 / 11 | |
| 1.2.3 | 6 / 11 | |
| 1.2.2 | 7 / 11 | |
| 1.2.1 | 6 / 10 | |
| 1.2.0 | 6 / 10 | |
| 1.1.0 | 6 / 10 | |
| 1.0.2 | 6 / 10 | |
| 1.0.1 | 6 / 10 | |
| 1.0.0 | 6 / 10 |
v1.36.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.35.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.33.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.