Canonical helpers for Stallari-conformant TypeScript MCP servers — _meta audit envelope builder per DD-338 wire contract, plus S-AUD-001 static lint (DD-338 Phase B). Drop-in primitives for any Node MCP author targeting Stallari's contract surface.

Takes any number of features and returns a rectangular Polygon that encompasses all vertices.

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles, optional paid runtime intelligence (Fallow Runtime). Quality, risk, architecture, dependencies, duplication, and design-system drift for humans, CI, and the agen

Audits NPM, Yarn, and PNPM projects in CI environments

Used to transfer signed peer data across the network

Verdaccio Middleware plugin to bypass npmjs audit

Replay-aware token measurement service (ctx.tokenMeter) for the DeepSeek Harness

Given a response from the npm security api, render it into a variety of security reports

PostgreSQL MCP server, read-only by default: query, schema introspection, EXPLAIN plans, index advisor, and DBA health checks.

Reshape into a better npm audit for the community and encourage more people to include security audit into their process.

In-process fork subagent backend: runs a child agent seeded with a prefix of the parent's log

Generate an HTML report for CODEOWNERS ownership gaps and run in CI or from the CLI to fail when files are not covered.

Core modules for audit-resolve.json file and logic of its processing

The missing `yarn audit fix`

Fast local and network IPC with Node.js-only JavaScript and aligned dependency-free Rust and C# implementations.

Aids humans and automation in managing npm audit results

OCI NodeJS client for Audit Service

Parse OGC Geography Markup Language in Pure JavaScript

RFC-5321 envelope and RFC-5322 header email-address parser

Provides audit logging functionalities for Node.js applications