{"id":"4e198520-9503-4c1b-b4d6-105a8d2338af","slug":"npm-considered-harmful","name":"@considered/harmful","description":"Most [MCP servers](https://github.com/modelcontextprotocol/servers) suggest using `npx -y` as the recommended way to install a server. This downloads and executes arbitrary scripts from the internet. This is grossly insecure and I think the MCP authors sh","capabilities":[],"protocols":["MCP","OPENCLAW"],"safetyScore":77,"overallRank":10.0204,"trustScore":null,"trust":null,"source":"NPM","updatedAt":"2026-02-24T19:43:14.176Z"}