{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T18:27:17.987Z","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone","markdownUrl":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone.md","server":{"slug":"cyuanxv-feishu-mcp-standalone","name":"Feishu MCP Self-hosted","registryName":"io.github.cyuanxv/feishu-mcp-standalone","description":"Single-owner Feishu MCP: run your own service, configure your app, authorize your Feishu account.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"cyuanxv-feishu-mcp-standalone","type":"npm","identifier":"@cyuanxv/feishu-mcp-standalone","withdrawn":false,"url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone","version":"0.1.0-local.4","transport":"stdio","scoredAt":"2026-11-05T02:06:44.532Z"},"score":{"total":32,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":32},{"date":"2026-11-04","total":32},{"date":"2026-11-03","total":32},{"date":"2026-11-02","total":32},{"date":"2026-11-01","total":32},{"date":"2026-10-31","total":32},{"date":"2026-10-30","total":32},{"date":"2026-10-29","total":32},{"date":"2026-10-28","total":32},{"date":"2026-10-27","total":32},{"date":"2026-10-26","total":32},{"date":"2026-10-25","total":32},{"date":"2026-10-24","total":32},{"date":"2026-10-23","total":32},{"date":"2026-10-22","total":32}]},"categories":[{"name":"Supply Chain Security","score":90,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects sharp 0.35.2, reached via miniflare > sharp. A fixed version is available.","No install/post-install scripts declared.","33 of 148 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.transitive","args":{"path":"miniflare > sharp","package":"sharp","version":"0.35.2","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"148","unhealthy":"33"}}]},{"name":"Provenance & Transparency","score":23,"verdict":"fail","reasons":["Repository check failed: no source repository is declared.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 12 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_none","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"12"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: our sandbox could not run this package, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]}],"inconclusive":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess.","Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.","Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess.","Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.","Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"cyuanxv-feishu-mcp-standalone","type":"npm","identifier":"@cyuanxv/feishu-mcp-standalone","withdrawn":false,"score":32,"current":true,"url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone","markdownUrl":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@cyuanxv/feishu-mcp-standalone"},{"label":"Version","value":"0.1.0-local.4"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:06:44.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-rgj7-g3m4-5g8c","cve":"CVE-2026-114112","severity":"high","fixAvailable":true},{"id":"GHSA-wq5f-xc86-pv6w","cve":"CVE-2026-114111","severity":"high","fixAvailable":true},{"id":"GHSA-2gqq-gqf2-x968","cve":"CVE-2026-84947","severity":"low","fixAvailable":true},{"id":"GHSA-2jfj-6hjv-fm6j","cve":"CVE-2026-84933","severity":"medium","fixAvailable":true},{"id":"GHSA-2m5v-pch6-74hx","cve":"CVE-2026-109383","severity":"high","fixAvailable":true},{"id":"GHSA-3wwx-pv8p-q78v","cve":"CVE-2026-85024","severity":"medium","fixAvailable":true},{"id":"GHSA-3xpg-4rpp-hhhm","cve":"CVE-2026-84890","severity":"medium","fixAvailable":true},{"id":"GHSA-4cwx-7wf7-3272","cve":"CVE-2026-13697","severity":"high","fixAvailable":true},{"id":"GHSA-4qv8-2p9j-2685","cve":"CVE-2026-109924","severity":"medium","fixAvailable":true},{"id":"GHSA-4w7w-5xrc-9h26","cve":"CVE-2026-109829","severity":"high","fixAvailable":true},{"id":"GHSA-55wc-3pg8-jfw6","cve":"CVE-2026-87029","severity":"medium","fixAvailable":true},{"id":"GHSA-8436-99hf-9mmv","cve":"CVE-2026-85008","severity":"low","fixAvailable":true},{"id":"GHSA-8xcm-r25x-g524","cve":"CVE-2026-16728","severity":"medium","fixAvailable":true},{"id":"GHSA-9fm3-97px-rjf6","cve":"CVE-2026-109932","severity":"medium","fixAvailable":true},{"id":"GHSA-f72v-6w45-q472","cve":"CVE-2026-109841","severity":"medium","fixAvailable":true},{"id":"GHSA-jr45-8vmc-qm54","cve":"CVE-2026-14643","severity":"medium","fixAvailable":true},{"id":"GHSA-m8rv-5g2x-5cg5","cve":"CVE-2026-15157","severity":"medium","fixAvailable":true},{"id":"GHSA-pmjh-fq2x-6v4x","cve":"CVE-2026-18149","severity":"medium","fixAvailable":true},{"id":"GHSA-qrxm-fqhp-jwvm","cve":"CVE-2026-87018","severity":"high","fixAvailable":true},{"id":"GHSA-r53p-7pc4-xj5r","cve":"CVE-2026-18540","severity":"low","fixAvailable":true},{"id":"GHSA-rfgv-xxqx-mfg5","cve":"CVE-2026-19534","severity":"high","fixAvailable":true},{"id":"GHSA-rx4f-c7p8-82vq","cve":"CVE-2026-85014","severity":"medium","fixAvailable":true},{"id":"GHSA-v3r7-h72x-cjcm","cve":"CVE-2026-16729","severity":"medium","fixAvailable":true},{"id":"GHSA-w293-vg96-wgc3","cve":"CVE-2026-84961","severity":"high","fixAvailable":true},{"id":"GHSA-xjj6-f33q-929c","cve":"CVE-2026-109869","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":25,"dependencies":{"nodes":148,"partial":false,"deprecated":null,"stale":33,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-22","recent":[{"id":"chg_01a18042-3ea2-7e35-970b-803cd1de8bba","kind":"advisory.identified","summary":"CVE-2026-109829 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a18042-3ea2-7e35-970b-803cd1de8bba"},{"id":"chg_01a18042-3ea4-7258-b0d4-51e0a5d4ff76","kind":"advisory.identified","summary":"CVE-2026-109383 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a18042-3ea4-7258-b0d4-51e0a5d4ff76"},{"id":"chg_01a18042-3ea4-781c-bd6d-d26522d8f519","kind":"advisory.identified","summary":"CVE-2026-87029 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a18042-3ea4-781c-bd6d-d26522d8f519"},{"id":"chg_01a18042-3ea4-7da7-b83c-f2b8f8bd1573","kind":"advisory.identified","summary":"CVE-2026-87018 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a18042-3ea4-7da7-b83c-f2b8f8bd1573"},{"id":"chg_01a18042-3ea5-74cc-9a61-efeba66799d3","kind":"advisory.identified","summary":"CVE-2026-109932 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a18042-3ea5-74cc-9a61-efeba66799d3"},{"id":"chg_01a16ba8-7ba6-74c8-b1e8-1971b247e91f","kind":"advisory.identified","summary":"CVE-2026-109924 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a16ba8-7ba6-74c8-b1e8-1971b247e91f"},{"id":"chg_01a16ba8-7ba8-7c1f-b79e-7bffe1c40666","kind":"advisory.identified","summary":"CVE-2026-109869 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a16ba8-7ba8-7c1f-b79e-7bffe1c40666"},{"id":"chg_01a16ba8-7ba9-72ed-99ca-8e229255ea9f","kind":"advisory.identified","summary":"CVE-2026-109841 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a16ba8-7ba9-72ed-99ca-8e229255ea9f"},{"id":"chg_01a16728-d043-78ff-8490-6f2dbaeda8c6","kind":"package.version_changed","summary":"Package version (0.1.0-local.3 → 0.1.0-local.4)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a16728-d043-78ff-8490-6f2dbaeda8c6"},{"id":"chg_01a163e9-deb3-7383-b612-853bb1215080","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone#chg-chg_01a163e9-deb3-7383-b612-853bb1215080"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone/changelog.json"},"links":{"html":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone","markdown":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone.md","changelogJson":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone/changelog.json","changelogRss":"https://verifymcp.io/servers/cyuanxv-feishu-mcp-standalone/cyuanxv-feishu-mcp-standalone.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@cyuanxv/feishu-mcp-standalone"},{"label":"Socket report","href":"https://socket.dev/npm/package/@cyuanxv/feishu-mcp-standalone"}]}}