{"name":"io.github.makz81/spendlog","slug":"makz81-spendlog","title":"Spendlog","description":"MCP server for expense tracking, invoices, budgets, and financial insights directly in Claude","url":"https://mcp.market/server/makz81-spendlog","rating":null,"grade":"C","score":63,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":9,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-06-08T02:24:50.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/makz81/spendlog","website":null,"version":"1.0.4","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"spendlog","version":"1.0.4","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":63,"grade":"C","scanned_at":"2026-09-27T23:19:12.692Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T23:19:12.610Z","components":{"code":{"score":13,"max":25,"notes":["85 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 112 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/cli.js: … try { execSync(`claude mcp add spendlog --scope user -- npx -y --package=${PACKAGE_NAME} ${MCP_SERVER_BIN}`, { stdio: 'pipe' }); …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"spendlog","version":"1.0.5","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":8,"publishedAt":"2026-04-15T20:39:38.937Z","repositoryUrl":"git+https://github.com/makz81/spendlog.git"}],"repo":{"found":true,"owner":"makz81","repo":"spendlog","archived":false,"pushedAt":"2026-06-08T02:24:50Z","stars":1,"forks":0,"openIssues":7,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/6616210?v=4","ownerCreatedAt":"2014-02-07T14:04:35Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/6616210?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-06-08T02:24:50.000Z","score":9}}}},"grade_history":[],"reviews":[]}