Cra Annex Ii Docs Lint runs on your own machine — the client starts it, so there is no endpoint to ping. 124 installs a week from npm. Last commit 2 Nov 2026.
19 rules over the user documentation that ships with your product: support-period end date, vulnerab
We read the source, 5 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
этот файл ставится пользователю, но в репозитории его нет
var files = all.filter(function (x) { try { return fs.statSync(path.join(dir, x)).isFile(); } catch (e) { return false; } });
ProcessBuilder pb = new ProcessBuilder(win ? "npx.cmd" : "npx", "-y", NPM, f.toString());
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
o.innerHTML=s+'</table>'};
…S Firebase's defaults, and this list has no **/.* entry. Every dotfile under the public root — .env, .env.production, .npmrc, .git — is uploaded and served.","fix":"Add \"**/.*\" back to the ignore array."},
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add cra-annex-ii-docs-lint -- npx -y @readystack/cra-annex-ii-docs-lint
{
"mcpServers": {
"cra-annex-ii-docs-lint": {
"command": "npx",
"args": [
"-y",
"@readystack/cra-annex-ii-docs-lint"
]
}
}
}
[mcp_servers.cra-annex-ii-docs-lint]
command = "npx"
args = ["-y", "@readystack/cra-annex-ii-docs-lint"]
{
"mcpServers": {
"cra-annex-ii-docs-lint": {
"command": "npx",
"args": [
"-y",
"@readystack/cra-annex-ii-docs-lint"
]
}
}
}
{
"servers": {
"cra-annex-ii-docs-lint": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@readystack/cra-annex-ii-docs-lint"
]
}
}
}
13 rules that decide whether a vulnerability report ever reaches you
32 checks for Angular APIs that were removed or deprecated, plus the support window on your version
An MCP server for Arcjet - the runtime security platform that ships with your AI code.
Extract URLs from documentation, configuration and code, with their protocol and position.
Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.
Hire AI workers that run on schedule, report back and act with your OK. Or deploy private models.
Query your OVRSEA freight: shipments, quotations, documents, tasks, and reporting analytics.
AI product expert answering from live source code, with sources and a verification status.
Answers built from our own checks of this server.