webmcp-types ↗
webmcp-types is a community-maintained WebMCP tool from npm. Anomity scores its risk at 40 out of 100 (medium).
Analysis summary
webmcp-types is a community-maintained WebMCP tool from npm. Anomity scores its risk at 40 out of 100 (medium).
TypeScript declarations for the experimental WebMCP browser interfaces. It ships types only — no runtime code — so applications can compile against the API before it stabilises without reaching for `any`.
As a types-only package it declares no runtime capabilities and carries essentially no direct risk; it is catalogued because it appears in the dependency tree of most WebMCP projects and reviewers will encounter it. The one thing worth checking is version drift: the underlying API is experimental, and types that describe an older shape will happily compile code the browser then rejects at runtime.
Why this entry scored 40 out of 100
This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 40, placing it in the medium band.
Findings
-
Established community project Trust offset