{"name":"io.github.lacausecrypto/sophon","slug":"lacausecrypto-sophon","title":"Sophon","description":"Honest token economics for MCP agents. 68% tokens saved, zero-ML Rust binary.","url":"https://mcp.market/server/lacausecrypto-sophon","rating":null,"grade":"D","score":48,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":19,"stars":9,"forks":0,"downloads_week":null,"last_push_at":"2026-06-19T14:26:46.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/lacausecrypto/mcp-sophon","website":"https://github.com/lacausecrypto/mcp-sophon#readme","version":"0.5.4","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"mcp-sophon","version":"0.5.4","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Start the Sophon MCP stdio server.","value":"serve","type":"positional"}]}],"tools":[],"scan":{"score":48,"grade":"D","scanned_at":"2026-09-27T21:49:49.120Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T21:49:49.044Z","components":{"code":{"score":3,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 100 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"install.js: …rchiveName.endsWith('.tar.gz')) { execSync(`tar -xzf \"${archivePath}\" -C \"${tmpDir}\"`, { stdio: 'inherit' }); } …"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: …, \"LICENSE\" ], \"scripts\": { \"postinstall\": \"node install.js\", \"test\": \"node -c…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"mcp-sophon","version":"0.5.4","found":true,"license":"MIT","hasInstallScripts":true,"dependencyCount":0,"publishedAt":"2026-04-30T12:50:07.932Z","repositoryUrl":"git+https://github.com/lacausecrypto/mcp-sophon.git"}],"repo":{"found":true,"owner":"lacausecrypto","repo":"mcp-sophon","archived":false,"pushedAt":"2026-06-19T14:26:46Z","stars":9,"forks":0,"openIssues":1,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/103178554?v=4","ownerCreatedAt":"2022-04-07T08:37:19Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/103178554?v=4&s=128","source":"github"},"presence":{"stars":9,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-06-19T14:26:46.000Z","score":19}}}},"grade_history":[],"reviews":[]}