Static analysis for vibe-coded apps. Flags security, reliability, performance, and AI quality issues in code generated by Cursor, v0, Bolt, and Copilot
Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.
Version 0.10.0 declares 1 executable entrypoint.
npm install --save-exact prodlint@0.10.0npx -y -p prodlint@0.10.0 prodlint{
"mcpServers": {
"prodlint": {
"command": "npx",
"args": [
"-y",
"-p",
"prodlint@0.10.0",
"prodlint"
]
}
}
}| Canonical slug | prodlint-3460954a | Deployment | Local Only |
|---|---|---|---|
| Canonical package | npm:prodlint | Repository | prodlint/prodlint |
| First published | — | Latest release | — |
| Last security verification | — | Classification confidence | 90% |
| Publication | Published | Official distribution | Yes |
| Channel | Identifier | Current version | Versions | Source |
|---|---|---|---|---|
| npm | prodlint | 0.10.0 | 1 | Repository |
| Package | Version | Published / observed | Inventory | Security scan |
|---|---|---|---|---|
| npmprodlint | 0.10.0Current | Sep 5, 2026 | 2 toolsSucceeded · 0 resources · 0 prompts | Failed |
Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.
| Provenance | artifact_hash_verified | Signature | — |
|---|---|---|---|
| MCP SDK | @modelcontextprotocol/sdk | Artifact SHA-256 | a687de197b6322edcb4ecb7681d3e70009f940709ede455f1b6bdcf669604284 |
| Scanner | mcp-proof-engine 0.1.0 | Scan completed | Aug 20, 2026 |
| Security rating | 53 / 100 | Methodology | version-rating-1.0 |
[ "prodlint" ]
[ "dynamic_or_process_execution" ]
| Tool | Category | Annotations | Risk |
|---|---|---|---|
scanCheck a vibe-coded project's production readiness. Returns a 0-100 score with findings across security, reliability, performance, and AI quality categories.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"path": {
"type": "string",
"description": "Absolute path to the project directory to scan"
},
"ignore": {
"description": "Glob patterns to ignore",
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"path"
]
} | — | — | |
scan-webCheck a deployed website's AI agent-readiness. Returns a 0-100 score across 14 checks including robots.txt AI directives, llms.txt, AgentCard, WebMCP, and more.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "URL of the website to scan (e.g. https://example.com)"
}
},
"required": [
"url"
]
} | — | — |
| Endpoint | Transport | Authentication | Health | Observed |
|---|---|---|---|---|
| No verified remote endpoint is linked. | ||||
Install the selected package version with: npm install --save-exact prodlint@0.10.0
prodlint MCP Server exposed 2 tools during independent protocol observation, including scan, scan-web.
Our scanner tested version 0.10.0 without proving a finding in the methods exercised. This is not a guarantee that every deployment is secure.
Curated product and capability guides containing this catalog record.