github.com / iamjameslennon

iamjameslennon/ddb-mcp

TypeScript·111 files·commit 1846fb9·scanned 4d ago·cached ✓

4/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

CLI tool detected

threat-state: safelive

FINDINGS ░▒▓

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

91 files scanned @ 1846fb9 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 91/111rules hit 1engine v7commit 1846fb9

github

iamjameslennon/ddb-mcp

D&D Beyond MCP server for Claude — access characters, campaigns, sourcebooks, spells, and more

TypeScript

179d

111 files

91 scanned(82%)

1846fb9

architecture░▒▓

entry (1) flagged (0) pkg (17)

104 nodes · 244 edgesscroll to zoom · click node to jump to finding