Skip to content

Conversation

@IgorWnek
Copy link
Contributor

@IgorWnek IgorWnek commented Jul 25, 2025

Issue

Vulnerability

I wanted to run the MCP server locally. Once I installed packages I saw the information about the critical severity vulnerability:

npm install

added 155 packages, and audited 156 packages in 996ms

36 packages are looking for funding
  run `npm fund` for details

1 critical severity vulnerability

Fixing tests

I've run the tests and they failed, but they seems outdated. I've fixed the single place so the tests are correctly reflecting the code.

Solution

I've run the npm's audit to fix that:

npm audit fix

changed 1 package, and audited 156 packages in 955ms

36 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

NPM also automatically fixed to package name in the correct one.

This upgrade updated the form-data to 4.0.4.

Regarding the tests, I've just updated the path to the tools index file.

Please let me know what do you think.

Tests

After those fixes I've run commands:

npm run build

npm run test

npm start

✅ Tests went correct
✅ Then I've configured this locally running MCP server in Zed and tested if everything works fine.

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the pr,it's now under review

@IgorWnek
Copy link
Contributor Author

IgorWnek commented Jul 26, 2025

@Jpisnice what's wrong with this Labeler? I didn't change anything in GH Actions or so.
What do you think about those changes?

@Jpisnice
Copy link
Owner

@Jpisnice what's wrong with this Labeler? I didn't change anything in GH Actions or so. What do you think about those changes?

hey @IgorWnek ,thanks for the changes.really appreciate it

@Jpisnice Jpisnice merged commit a116aaf into Jpisnice:master Jul 31, 2025
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants