← Browse

@somethingforheheda/claude-code

B

MCP server package @anthropic-ai/claude-code

mcp_servermcp

Install

agr install @somethingforheheda/claude-code --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@anthropic-ai/claude-code", "version": "2.1.88", "type": "module", "bin": { "claude": "cli.js" }, "engines": { "node": ">=18.0.0" }, "scripts": { "build": "bun build src/entrypoints/cli.tsx --outfile cli.js --target bun --define MACRO.VERSION="2.1.88" --define MACRO.BUILD_TIME="2025-01-01" --define MACRO.FEEDBACK_CHANNEL="https://github.com/anthropics/claude-code/issues\" --define MACRO.ISSUES_EXPLAINER="https://github.com/anthropics/claude-code/issues\" --define MACRO.NATIVE_PACKAGE_URL="https://npmjs.com\" --define MACRO.PACKAGE_URL="https://npmjs.com\" --define MACRO.VERSION_CHANGELOG=""", "start": "bun cli.js", "typecheck": "tsc --noEmit" }, "dependencies": { "@alcalzone/ansi-tokenize": "^0.1.3", "@anthropic-ai/sdk": "^0.80.0", "@aws-sdk/client-bedrock-runtime": "^3.758.0", "@aws-sdk/client-sts": "^3.1020.0", "@azure/identity": "^4.13.1", "@commander-js/extra-typings": "12", "@growthbook/growthbook": "^1.3.1", "@modelcontextprotocol/sdk": "^1.10.2", "@opentelemetry/api": "^1.9.0", "@opentelemetry/api-logs": "^0.57.2", "@opentelemetry/core": "^1.30.1", "@opentelemetry/exporter-logs-otlp-grpc": "^0.214.0", "@opentelemetry/exporter-logs-otlp-http": "^0.214.0", "@opentelemetry/exporter-logs-otlp-proto": "^0.214.0", "@opentelemetry/exporter-metrics-otlp-grpc": "^0.214.0", "@opentelemetry/exporter-metrics-otlp-http": "^0.214.0", "@opentelemetry/exporter-metrics-otlp-proto": "^0.214.0", "@opentelemetry/exporter-prometheus": "^0.214.0", "@opentelemetry/exporter-trace-otlp-grpc": "^0.214.0", "@opentelemetry/exporter-trace-otlp-http": "^0.214.0", "@opentelemetry/exporter-trace-otlp-proto": "^0.214.0", "@opentelemetry/resources": "^2.6.1", "@opentelemetry/sdk-logs": "^0.57.2", "@opentelemetry/sdk-metrics": "^1.30.1", "@opentelemetry/sdk-trace-base": "^1.30.1", "@opentelemetry/semantic-conventions": "^1.30.1", "ajv": "^8.17.1", "asciichart": "^1.5.25", "auto-bind": "^5.0.1", "axios": "^1.8.4", "bidi-js": "^1.0.3", "chalk": "^5.4.1", "chokidar": "^4.0.3", "cli-boxes": "^3.0.0", "code-excerpt": "^4.0.0", "commander": "12", "diff": "^7.0.0", "emoji-regex": "^10.4.0", "env-paths": "^3.0.0", "execa": "^9.5.2", "fflate": "^0.8.2", "figures": "^6.1.0", "fuse.js": "^7.1.0", "get-east-asian-width": "^1.3.0", "google-auth-library": "^9.15.1", "highlight.js": "^11.11.1", "https-proxy-agent": "^7.0.6", "ignore": "^7.0.3", "indent-string": "^5.0.0", "ink": "^5.1.0", "jsonc-parser": "^3.3.1", "lodash-es": "^4.17.21", "lru-cache": "^11.0.2", "marked": "^15.0.7", "p-map": "^7.0.3", "picomatch": "^4.0.2", "proper-lockfile": "^4.1.2", "qrcode": "^1.5.4", "react": "19", "react-compiler-runtime": "^1.0.0", "react-reconciler": "^0.33.0", "semver": "^7.7.1", "sharp": "^0.34.5", "shell-quote": "^1.8.2", "signal-exit": "^4.1.0", "stack-utils": "^2.0.6", "strip-ansi": "^7.1.0", "supports-hyperlinks": "^3.1.0", "tree-kill": "^1.2.2", "turndown": "^7.2.2", "type-fest": "^4.37.0", "undici": "^7.4.0", "usehooks-ts": "^3.1.1", "vscode-jsonrpc": "^8.2.1", "vscode-languageserver-protocol": "^3.17.5", "vscode-languageserver-types": "^3.17.5", "wrap-ansi": "^9.0.0", "ws": "^8.18.1", "xss": "^1.0.15", "yaml": "^2.8.3", "zod": "^4" }, "devDependencies": { "@types/node": "^22.0.0", "@types/react": "^18.3.1", "@types/react-reconciler": "^0.28.9", "@types/semver": "^7.5.8", "@types/shell-quote": "^1.7.5", "@types/ws": "^8.5.14", "@types/lodash-es": "^4.17.12", "@types/qrcode": "^1.5.5", "@types/proper-lockfile": "^4.1.4", "@types/stack-utils": "^2.0.3", "typescript": "^5.8.3" }, "optionalDependencies": { "@img/sharp-darwin-arm64": "^0.33.5", "@img/sharp-darwin-x64": "^0.33.5", "@img/sharp-linux-arm64": "^0.33.5", "@img/sharp-linux-x64": "^0.33.5" } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-f0843fbf19812026-08-06