← Browse

@neovateai/code

A

MCP server package @neovate/code

mcp_servermcp

Install

agr install @neovateai/code --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@neovate/code", "version": "0.28.5", "type": "module", "files": [ "dist", "vendor" ], "main": "./dist/index.mjs", "types": "./dist/index.d.ts", "source": "./src/index.ts", "bin": { "neovate": "./dist/cli.mjs" }, "scripts": { "dev": "bun ./src/cli.ts", "format": "biome format .", "build:type": "tsc --project tsconfig.json --emitDeclarationOnly --declarationDir dist-dts", "build:cli": "bun build src/cli.ts --external react-devtools-core --minify --outfile dist/cli.mjs --target=node", "build:index": "bun build src/index.ts --external react-devtools-core --minify --outfile dist/index.mjs --target=node", "build:dts": "npm run build:type && api-extractor run --local --verbose", "build:post": "bun scripts/post-build.ts", "build": "rm -rf dist dist-dts && npm run build:cli && npm run build:index && npm run build:dts && npm run build:post", "ci": "npm run typecheck && npm run format && npm run test && npm run build && npm run test:cli", "detect-unused": "bun scripts/detect-unused.ts", "extension:build": "pnpm --filter neovate-assistant build", "extension:dev": "pnpm --filter neovate-assistant dev", "extension:publish": "cd vscode-extension && npm run publish && cd ..", "extension:package": "pnpm --filter neovate-assistant package", "extension:bump": "pnpm --filter neovate-assistant bump", "release": "npm run ci && bun scripts/release.ts", "release:minor": "npm run ci && bun scripts/release.ts --minor", "release:major": "npm run ci && bun scripts/release.ts --major", "test": "vitest run", "test:cli": "bun scripts/cli-integration-test.ts", "test:watch": "vitest", "test:e2e": "bun scripts/e2e.ts", "typecheck": "tsc --noEmit", "prepare": "husky", "ready": "bun scripts/ready.ts", "update:ripgrep": "bun scripts/updateRipgrep.ts" }, "keywords": [ "cli", "neovate", "neo", "ai", "coding-agent", "agent" ], "authors": [ "chencheng sorrycc@gmail.com (https://github.com/sorrycc)" ], "homepage": "https://neovateai.dev", "repository": { "type": "git", "url": "https://github.com/neovateai/neovate-code/" }, "bugs": { "url": "https://github.com/neovateai/neovate-code/issues" }, "license": "MIT", "description": "A coding agent to enhance your development workflow.", "devDependencies": { "@agentclientprotocol/sdk": "^0.13.0", "@ai-sdk/anthropic": "^3.0.35", "@ai-sdk/google": "^3.0.20", "@ai-sdk/mcp": "^1.0.18", "@ai-sdk/openai": "^3.0.25", "@ai-sdk/openai-compatible": "^2.0.26", "@ai-sdk/provider": "^3.0.7", "@biomejs/biome": "^2.3.13", "@fastify/type-provider-typebox": "6.1.0", "@microsoft/api-extractor": "^7.56.0", "@modelcontextprotocol/inspector": "^0.19.0", "@modelcontextprotocol/sdk": "^1.25.3", "@openrouter/ai-sdk-provider": "^2.1.1", "@types/bun": "^1.3.8", "@types/debug": "^4.1.12", "@types/degit": "^2.8.6", "@types/lodash-es": "^4.17.12", "@types/marked-terminal": "^6.1.1", "@types/node": "^25.1.0", "@types/react": "^19.2.10", "@types/resolve": "^1.20.6", "@types/turndown": "^5.0.6", "@types/ws": "^8.18.1", "@types/yargs-parser": "^21.0.3", "ai": "^6.0.67", "chalk": "^5.5.0", "chardet": "^2.1.1", "cli-highlight": "^2.1.11", "clipboardy": "^5.1.0", "debug": "^4.4.3", "defu": "^6.1.4", "degit": "^2.8.4", "diff": "^8.0.3", "fastify": "^5.7.2", "fastmcp": "^3.31.0", "front-matter": "^4.0.2", "glob": "^13.0.0", "gpt-tokenizer": "^3.4.0", "gradient-string": "^3.0.0", "husky": "^9.1.7", "ink": "^6.6.0", "ink-select-input": "^6.2.0", "ink-spinner": "^5.0.0", "is-unicode-supported": "^2.1.0", "jiti": "^2.6.1", "jsonrepair": "^3.13.2", "lint-staged": "^16.2.7", "lodash-es": "^4.17.23", "marked": "^17.0.1", "marked-terminal": "^7.3.0", "oauth-providers": "^1.0.5", "open": "^11.0.0", "pathe": "^2.0.3", "picocolors": "^1.1.1", "portfinder": "^1.0.38", "react": "^19.2.4", "resolve": "^1.22.11", "spawn-rx": "^5.1.2", "strip-ansi": "^7.1.0", "tar": "^7.5.7", "terminal-link": "^5.0.0", "turndown": "^7.2.2", "typescript": "^5.9.3", "undici": "6.13.0", "vitest": "^4.0.18", "wrap-ansi": "^9.0.0", "ws": "^8.19.0", "yargs-parser": "22.0.0", "zod": "^4.3.6", "zustand": "^5.0.11" }, "volta": { "node": "22.11.0", "pnpm": "10.13.1" }, "packageManager": "pnpm@10.13.1", "lint-staged": { "*.{js,jsx,ts,tsx,json,css}": "biome format --write" }, "publishConfig": { "access": "public" } }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-fce5797e2ce52026-08-06