Server data from the Official MCP Registry
Map single-author, never-reviewed files from authorship and review data: a factual risk list.
About
Map single-author, never-reviewed files from authorship and review data: a factual risk list.
Security Report
busfactor is a pure local computation tool that analyzes authorship and review data supplied by the caller to flag single-author, never-reviewed files. It has no network calls, no shell or eval usage, no hardcoded secrets, and no authentication requirement, which is appropriate for its purpose. Only minor input-handling observations were found, none of which materially affect the score. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
8 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-cloudcorprecords-busfactor": {
"args": [
"-y",
"@reneturcios/busfactor"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
busfactor
Every codebase has files that only one person really knows. If that person is away — on holiday, off sick, gone from the team — those files are the ones nobody can safely change. busfactor works out where that risk sits. You give it, for each file, who wrote it and how many commits each author made, plus who reviewed changes to it, and it gives back a factual map:
- Per-file entries — for every file, its
total_commits, how many distinct authors it has, itstop_authorand that author'stop_shareof the file's commits, andexternal_reviewers: how many of its reviewers are not authors of the file. A review by one of the file's own authors does not count as external review, so a file checked only by the people who wrote it reads as never reviewed. - Two flags, one list — a file is
dominatedwhen its top author's share reaches the threshold (0.8 by default), andnever_reviewedwhen it has no external reviewers. A file that is both isat_risk, andat_risk_filescollects exactly those paths. The list is a statement of fact about concentration and coverage; it carries no judgement about the people involved. - Summary counts — how many files were analysed, how many are at risk, how many have a single author, and how many were never externally reviewed.
Duplicate author names inside one file are merged by
summing their commits before anything is computed, and
reviewer names are de-duplicated. The top-author share is
rounded to four decimal places, and the domination check
compares that rounded share — the number the report itself
shows — against the threshold, so a file reported at
exactly the threshold is always flagged dominated. Every
list in the result is sorted ascending, so the same data
always yields exactly the same map. Malformed input — a
missing or empty file list, a duplicate path, an author
with no commits — is a validation error naming the
offending path (for example
files[1].authors[0].commits must be an integer >= 1),
and no partial map is produced. The computation is pure
and local: no network, no configuration, no files read
beyond the input you pass in.
CLI
npx @reneturcios/busfactor analyze --input args.json
npx @reneturcios/busfactor --version
args.json contains the full arguments object:
{
"files": [
{ "path": "src/solo.ts", "authors": [{ "name": "amy", "commits": 10 }] },
{
"path": "src/shared.ts",
"authors": [
{ "name": "amy", "commits": 5 },
{ "name": "bob", "commits": 5 }
],
"reviewers": ["amy", "cleo"]
}
]
}
reviewers defaults to [] per file, and threshold
defaults to 0.8. Here src/solo.ts is single-author and
unreviewed, while src/shared.ts is split evenly and was
externally reviewed by cleo. The map is printed as JSON:
{
"files": [
{
"path": "src/shared.ts",
"total_commits": 10,
"distinct_authors": 2,
"top_author": "amy",
"top_share": 0.5,
"external_reviewers": 1,
"never_reviewed": false,
"dominated": false,
"at_risk": false
},
{
"path": "src/solo.ts",
"total_commits": 10,
"distinct_authors": 1,
"top_author": "amy",
"top_share": 1,
"external_reviewers": 0,
"never_reviewed": true,
"dominated": true,
"at_risk": true
}
],
"at_risk_files": ["src/solo.ts"],
"summary": {
"total_files": 2,
"at_risk_count": 1,
"single_author_count": 1,
"never_reviewed_count": 1
}
}
Exit codes: 0 on success, 1 on a runtime error (including
an unreadable or invalid input file, or invalid input), 2
on a usage error.
MCP server
npx -y @reneturcios/busfactor mcp
MCP client config:
{
"mcpServers": {
"busfactor": {
"command": "npx",
"args": ["-y", "@reneturcios/busfactor", "mcp"]
}
}
}
Tools
-
analyze_bus_factor— Map single-author, never-reviewed files from authorship and review data.files(array, required, at least one) — files as{path, authors, reviewers?}objects;pathis unique across the set, eachauthorsentry is a{name, commits}pair with at least 1 commit, andreviewerslists names that reviewed changes to the filethreshold(number, optional, default 0.8) — the top-author share at or above which a file counts as dominated by one author; must be > 0 and <= 1
Returns
{files, at_risk_files, summary}.
Docker
docker run -i ghcr.io/cloudcorprecords/busfactor
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/busfactor analyze --input /w/args.json
Development
npm install
npm run build # tsc -> dist/
npm test # tsx --test test/*.test.ts (pure local, no network)
npm run dev # run the CLI from source
License
MIT — Copyright (c) 2026 Rene Turcios
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
