Is @tobilu/qmd safe?

The component can run operating-system commands or spawn processes.

import { execFileSync } from "node:child_process";

import { spawn as nodeSpawn } from "child_process";

import { execFileSync } from "node:child_process";

import { spawnSync } from "node:child_process";

const result = spawnSync(command, args, {

const result = spawnSync("git", args, { cwd: root, encoding: "utf8", stdio: ["pipe", "pipe", "pipe"] });

import { spawnSync } from "node:child_process";

const result = spawnSync(command, args, {

Why it matters: Powerful and often legitimate — confirm the commands aren't built from untrusted input.

Fix: Confirm the command and its arguments are fully controlled and not derived from untrusted input; prefer execFile with an argument array.

package.json has a 'prepare' script (runs on git/local installs and before publishing).

"prepare": "node scripts/install-hooks.mjs && node scripts/build.mjs",

Why it matters: Usually a build step, but confirm it doesn't fetch or run remote code.

Fix: Usually a legitimate build step; confirm it only builds and does not fetch or execute remote code.

The component makes outbound network requests.

const resp = await fetch(url, { method: "HEAD" });

import { createServer } from "node:http";

const response = await mcpHandler.fetch(request, parsedBody !== undefined ? { parsedBody } : undefined);

Why it matters: Usually legitimate, but confirm the destinations are expected and no sensitive data leaves.

Fix: Confirm the destination hosts are expected and that no sensitive data is sent off-host.

An MCP tool surface (manifest or tool definitions) was found.

const server = new McpServer({ name: "qmd", version: getPackageVersion() }, {

server.registerTool("query", {

server.registerTool("get", {

server.registerTool("multi_get", {

server.registerTool("status", {

Why it matters: Just context — review which tools it offers and their permissions.

Fix: Review the declared MCP tools and their permissions.