@dgouron/reviewflow

MCP server package reviewflow

mcp_servermcp

Install

agr install @dgouron/reviewflow --target claude

This artifact does not publish files for Claude.

Document

{ "name": "reviewflow", "version": "3.50.0", "description": "AI-powered code review automation for GitLab/GitHub using Claude Code", "type": "module", "main": "dist/main/server.js", "bin": { "reviewflow": "dist/main/cli.js" }, "license": "MIT", "author": "Damien Gouron", "repository": { "type": "git", "url": "https://github.com/DGouron/review-flow.git" }, "bugs": { "url": "https://github.com/DGouron/review-flow/issues" }, "homepage": "https://github.com/DGouron/review-flow#readme", "files": [ "dist/", "templates/", "scripts/", "README.md", "LICENSE", "CHANGELOG.md" ], "keywords": [ "code-review", "claude", "ai", "webhook", "gitlab", "github", "merge-request", "pull-request", "automation", "reviewflow" ], "scripts": { "dev": "tsx watch src/main/cli.ts start --skip-dependency-check", "build": "tsc && tsc-alias && node scripts/copyAssets.mjs", "start": "node dist/main/cli.js start", "typecheck": "tsc --noEmit", "test": "vitest", "test:ui": "vitest --ui", "test:ci": "vitest --run", "coverage": "vitest --coverage", "test:mutation": "stryker run", "lint": "oxlint src", "lint:fix": "oxlint src --fix", "format": "oxfmt src", "format:check": "oxfmt --check src", "verify": "yarn typecheck && yarn lint && yarn format:check && yarn test:ci", "docs:dev": "vitepress dev docs", "docs:build": "vitepress build docs", "docs:preview": "vitepress preview docs" }, "dependencies": { "@fastify/static": "^10.1.2", "@fastify/websocket": "^11.0.0", "@hono/node-server": "2.0.10", "@inquirer/prompts": "^8.2.0", "@modelcontextprotocol/sdk": "^1.26.0", "animejs": "^4", "dotenv": "^16.4.0", "fastify": "^5.0.0", "p-queue": "^8.0.0", "pino": "^8.18.0", "pino-pretty": "^10.3.0", "zod": "^4.3.6" }, "devDependencies": { "@stryker-mutator/core": "^9.6.1", "@stryker-mutator/vitest-runner": "^9.6.1", "@types/node": "^20.0.0", "@types/ws": "^8.18.1", "@vitest/coverage-v8": "^4.0.18", "@vitest/ui": "^4.0.18", "oxfmt": "^0.54.0", "oxlint": "^1.69.0", "tsc-alias": "^1.8.16", "tsx": "^4.7.0", "typescript": "^5.8.0", "vitepress": "^1.6.4", "vitest": "^4.0.18", "vue": "^3.5.27" }, "engines": { "node": ">=20.0.0" }, "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e", "resolutions": { "esbuild": "^0.25.0", "hono": "^4.12.25", "ws": "^8.21.0", "qs": "^6.15.2", "vitest/vite": "^7.3.5", "@vitest/coverage-v8/vite": "^7.3.5", "@vitest/ui/vite": "^7.3.5", "vite-node/vite": "^7.3.5", "vitepress/vite": "^6.4.3" } }

Trustgrade B

passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
passFreshness
How long since the source repository was last pushed to.
warnPrompt injection1 hit(s): obfuscation
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- line 92 — Obscured code — eval, atob, or an encoded blob
passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

Aevery check passed
Bone warning
Ctwo warnings
Dprompt injection or body integrity failed, or three warnings
Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

git-c62a3aa553e52026-08-06