@open-dpp/main
BMCP server package @open-dpp/main
Install
agr install @open-dpp/main --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@open-dpp/main", "version": "2.8.0", "private": true, "description": "", "license": "ISC", "author": "", "scripts": { "build": "nest build", "start": "nest start", "export-api-doc": "nest start -- --export-api-doc ../../docs/api-docs.json", "start:dev": "nest start --watch", "dev": "nest start --watch", "start:debug": "nest start --debug --watch", "test": "NODE_OPTIONS=--experimental-vm-modules jest", "test:clear-cache": "jest --clearCache", "test:watch": "jest --watch", "test:cov": "jest --coverage", "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand", "test:e2e": "jest --config apps/main/test/jest-e2e.json", "check-ts": "tsc --noEmit" }, "dependencies": { "@better-auth/api-key": "^1.6.17", "@langchain/core": "^1.1.48", "@langchain/langgraph": "^0.4.9", "@langchain/mcp-adapters": "^1.1.3", "@langchain/mistralai": "^0.2.3", "@langchain/ollama": "^1.2.7", "@modelcontextprotocol/sdk": "^1.29.0", "@nestjs/axios": "^4.0.1", "@nestjs/common": "^11.1.26", "@nestjs/config": "^4.0.4", "@nestjs/core": "^11.1.26", "@nestjs/mapped-types": "^2.1.1", "@nestjs/microservices": "^11.1.26", "@nestjs/mongoose": "^11.0.4", "@nestjs/platform-express": "^11.1.26", "@nestjs/platform-socket.io": "^11.1.26", "@nestjs/serve-static": "^5.0.5", "@nestjs/swagger": "^11.4.4", "@nestjs/throttler": "^6.5.0", "@nestjs/websockets": "^11.1.26", "@open-dpp/api-client": "workspace:", "@open-dpp/dto": "workspace:", "@open-dpp/env": "workspace:", "@open-dpp/exception": "workspace:", "@open-dpp/permission": "workspace:", "@rekog/mcp-nest": "^1.9.10", "archiver": "^7.0.1", "axios": "^1.17.0", "better-auth": "^1.6.17", "body-parser": "^2.2.2", "class-transformer": "^0.5.1", "class-validator": "^0.14.4", "cpx": "^1.5.0", "dayjs": "^1.11.21", "express": "^5.2.1", "file-type": "^21.3.4", "form-data": "^4.0.5", "handlebars": "^4.7.9", "handlebars-helpers": "^0.10.0", "http-proxy-3": "^1.23.3", "langchain": "^1.4.4", "load-esm": "^1.0.3", "lodash": "^4.18.1", "minio": "^8.0.7", "mjml": "^4.18.0", "mjml-core": "^4.18.0", "mongodb": "~7.2", "mongoose": "^9.7.0", "multer": "^2.1.1", "nodemailer": "^7.0.13", "reflect-metadata": "^0.2.2", "rxjs": "^7.8.2", "semver": "^7.8.4", "sharp": "^0.34.5", "socket.io": "^4.8.3", "socket.io-client": "^4.8.3", "ts-pattern": "^5.9.0", "uri-js": "^4.4.1", "uuid": "^13.0.2", "zod": "^4.4.3", "zod-openapi": "^5.4.6" }, "devDependencies": { "@jest/globals": "^30.4.1", "@nestjs/cli": "^11.0.23", "@nestjs/schematics": "^11.1.0", "@nestjs/testing": "^11.1.26", "@open-dpp/testing": "workspace:", "@swc/core": "^1.15.41", "@swc/jest": "^0.2.39", "@tsconfig/node-lts": "^24.0.0", "@tsconfig/node-ts": "^23.6.4", "@types/archiver": "^7.0.0", "@types/body-parser": "^1.19.6", "@types/express": "^5.0.6", "@types/jest": "^30.0.0", "@types/lodash": "^4.17.24", "@types/mjml": "^4.7.4", "@types/mjml-core": "^4.15.2", "@types/multer": "^2.1.0", "@types/node": "^25.9.3", "@types/nodemailer": "^6.4.24", "@types/semver": "^7.7.1", "@types/supertest": "^6.0.3", "fishery": "^2.4.0", "jest": "^30.4.2", "mongodb-memory-server": "^11.2.0", "source-map-support": "^0.5.21", "supertest": "^7.2.2", "ts-loader": "^9.6.0", "ts-node": "^10.9.2", "tsconfig-paths": "^4.2.0", "typescript": "^5.9.3" }, "packageManager": "pnpm@11.6.0" }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicensecopyleft/unknown — index-and-link only
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-53cdc591de032026-08-06