Server data from the Official MCP Registry
Judge whether a dependency is maintained, from factual signals: releases, commits, archival.
About
Judge whether a dependency is maintained, from factual signals: releases, commits, archival.
Security Report
abandoncheck is a pure local computation MCP server that scores dependency maintenance from caller-supplied signals with no network access, no file reads, and no credentials. The code is clean, strictly validated, and well tested, with no malicious patterns, dangerous operations, or hardcoded secrets found. The only minor note is that the tool performs no external verification, so its accuracy depends entirely on the caller's input. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
8 files analyzed · 6 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-cloudcorprecords-abandoncheck": {
"args": [
"-y",
"@reneturcios/abandoncheck"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
abandoncheck
Every dependency in a tree was chosen at some point, often years ago, and the question that matters later is a plain one: is anyone still looking after this thing? abandoncheck answers it without guessing. You supply the factual signals you already have — whether the repository is archived, how long since the last release and the last commit, how many commits landed in the last 90 days, how many maintainers are active, and how many issues sit open — and it returns a verdict, a score, the bands those signals fall into, and the exact reasons behind the number.
Nothing is fetched and nothing is inferred about the code
itself. An archived repository settles the question on its
own: the score is 0 and the verdict is abandoned, no
matter how fresh the other signals look. Otherwise the
score starts at 100 and loses points in a fixed order for
missing or stale release information, missing or stale
commit information, a silent last 90 days, and a thin
maintainer bench — never below 0. The open issue count is
echoed back in the signals and deliberately never scored:
a busy tracker can mean a popular project as easily as a
neglected one, and this tool sticks to signals that point
one way.
The bands make the score auditable at a glance. A release
180 days old or newer is fresh, then aging to 365,
stale to 730, and dormant beyond that; with no release
information the band is unknown. Commits run on a tighter
clock: active to 90 days, slowing to 180, quiet to
365, and silent beyond that. Scores of 80 and up read as
maintained, 50 and up as at_risk, anything above 0 as
likely_abandoned, and 0 as abandoned. When no deduction
applies at all, the single reason is "no adverse signals";
otherwise each reason names the deduction that fired, in
the order it was applied.
Malformed input — a missing, empty, or non-string name,
a missing or non-boolean archived, or any optional count
that is not an integer of at least 0 — is a validation
error naming the offending path, with no partial result.
Unknown extra fields are ignored. The computation is pure
and local: no network, no configuration, and no repository
is read or touched.
CLI
npx @reneturcios/abandoncheck check --input args.json
npx @reneturcios/abandoncheck --version
args.json contains the full arguments object:
{
"name": "leftpad",
"archived": false,
"last_release_days": 45,
"last_commit_days": 12,
"recent_commits_90d": 18,
"maintainer_count": 3,
"open_issues": 27
}
The result is printed as JSON:
{
"name": "leftpad",
"verdict": "maintained",
"score": 100,
"signals": {
"archived": false,
"last_release_band": "fresh",
"last_commit_band": "active",
"recent_commits_90d": 18,
"maintainer_count": 3,
"open_issues": 27
},
"reasons": ["no adverse signals"]
}
Absent optional signals echo as null in signals, and
their bands are "unknown". Exit codes: 0 on success,
1 on a runtime error (including an unreadable or invalid
input file, or invalid input), 2 on a usage error.
MCP server
npx -y @reneturcios/abandoncheck mcp
MCP client config:
{
"mcpServers": {
"abandoncheck": {
"command": "npx",
"args": ["-y", "@reneturcios/abandoncheck", "mcp"]
}
}
}
Tools
-
check_dep_maintenance— Judge whether one dependency is maintained, from caller-supplied factual signals only.name(string, required, non-empty) — dependency namearchived(boolean, required) — whether the dependency's repository is archivedlast_release_days(integer, optional, at least 0) — days since the last release; omit if nonelast_commit_days(integer, optional, at least 0) — days since the last commit; omit if unknownrecent_commits_90d(integer, optional, at least 0) — commits in the last 90 daysmaintainer_count(integer, optional, at least 0) — number of active maintainersopen_issues(integer, optional, at least 0) — open issue count; reported, never scored
Returns
{name, verdict, score, signals, reasons}, wheresignalsis{archived, last_release_band, last_commit_band, recent_commits_90d, maintainer_count, open_issues}.
Docker
docker run -i ghcr.io/cloudcorprecords/abandoncheck
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/abandoncheck check --input /w/args.json
Development
npm install
npm run build # tsc -> dist/
npm test # tsx --test test/*.test.ts (pure local, no network)
npm run dev # run the CLI from source
License
MIT — Copyright (c) 2026 Rene Turcios
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
