io.github.Dave-London/build

NPM · @PARETOOLS/BUILD · SCANNED AUG 3

Structured build tool output (tsc, generic commands) as typed JSON diagnostics.

Available components

+33 this week 78 78 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to Dave-London/Pare). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 4 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability68

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 679 tokens (~135/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @paretools/build

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add dave-london-build -- npx -y @paretools/build

# add to Codex CLI

codex mcp add dave-london-build -- npx -y @paretools/build

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dave-london-build": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@paretools/build"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add dave-london-build --command npx --arg -y --arg @paretools/build

# ~/.hermes/config.yaml

mcp_servers:
  dave-london-build:
    command: "npx"
    args: ["-y", "@paretools/build"]

// mcp.json

{
  "mcpServers": {
    "dave-london-build": {
      "command": "npx",
      "args": [
        "-y",
        "@paretools/build"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +58
- Provenance: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- The attested source repository moved: Dave-London/Pare security
- Schema quality: unverified → good ▲ functional
- Stability: unverified → 0.23 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Licence: MIT functional
1 Aug 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 −18
- Malware scan: pass → unverified ▼ security
29 Jul 26 +19
- Dependency health: partial → unverified ▼ functional
- Tool coverage: unverified → 100 ▲ functional
28 Jul 26 −19
- Tool coverage: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- First check of Schema quality: unverified functional
27 Jul 26 45

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@paretools/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: Dave-London/Pare
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/Dave-London/Pare/.github/workflows/release.yml@refs/heads/main
Rekor log index:: 949168358
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:ddbb5b596ab5c8ecb8936d9db47327ac9a685b96b74c408e2ccc2e5f74449d7949917514e272648a721405474d1251346f02545397ff05d102b5b63d0
Discovery method:: attestation_endpoint

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 5 exposed · ~638 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

build Run Build ~116

Runs a build command and returns structured success/failure with errors and warnings. Use instead of running build commands in the terminal.

Input Output Examples

Name	Type	Req	Description
args	array	—	Arguments for the build command (e.g., ['run', 'build'])
command	string	yes	Build command to run (e.g., 'npm', 'npx', 'pnpm')
compact	boolean	—	Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
path	string	—	Working directory (default: cwd)

Name	Type	Req	Description
duration	number	yes	—
errors	array	—	—
success	boolean	yes	—
warnings	array	—	—

No examples provided.

esbuild ~207

Runs the esbuild bundler and returns structured errors, warnings, and output files. Use instead of running `esbuild` in the terminal.

Input Output Examples

Name	Type	Req	Description
args	array	—	Additional esbuild flags
bundle	boolean	—	Bundle dependencies (default: true)
compact	boolean	—	Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
entryPoints	array	yes	Entry point files to bundle (e.g., ['src/index.ts'])
format	string	—	Output format (esm, cjs, iife)
minify	boolean	—	Minify output (default: false)
outdir	string	—	Output directory
outfile	string	—	Output file (single entry point)
path	string	—	Project root path (default: cwd)
platform	string	—	Target platform (browser, node, neutral)
sourcemap	boolean	—	Generate source maps (default: false)

Name	Type	Req	Description
duration	number	yes	—
errors	array	—	—
outputFiles	array	—	—
success	boolean	yes	—
warnings	array	—	—

No examples provided.

tsc TypeScript Check ~107

Runs the TypeScript compiler and returns structured diagnostics (file, line, column, code, message). Use instead of running `tsc` in the terminal.

Input Output Examples

Name	Type	Req	Description
compact	boolean	—	Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
noEmit	boolean	—	Skip emitting output files (default: true)
path	string	—	Project root path (default: cwd)
project	string	—	Path to tsconfig.json

Name	Type	Req	Description
diagnostics	array	yes	—
errors	number	yes	—
success	boolean	yes	—
total	number	—	—
warnings	number	yes	—

No examples provided.

vite-build Vite Build ~97

Runs Vite production build and returns structured output files with sizes. Use instead of running `vite build` in the terminal.

Input Output Examples

Name	Type	Req	Description
args	array	—	Additional Vite build flags
compact	boolean	—	Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
mode	string	—	Build mode (default: production)
path	string	—	Project root path (default: cwd)

Name	Type	Req	Description
duration	number	yes	—
errors	array	—	—
outputs	array	—	—
success	boolean	yes	—
warnings	array	—	—

No examples provided.

webpack ~111

Runs webpack build with JSON stats output and returns structured assets, errors, and warnings. Use instead of running `webpack` in the terminal.

Input Output Examples

Name	Type	Req	Description
args	array	—	Additional webpack flags
compact	boolean	—	Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
config	string	—	Path to webpack config file
mode	string	—	Build mode (production, development, none)
path	string	—	Project root path (default: cwd)

Name	Type	Req	Description
assets	array	—	—
duration	number	yes	—
errors	array	—	—
modules	number	—	—
success	boolean	yes	—
warnings	array	—	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug