ASSESSMENT #AIM-2026-000000

com.shiftinbits/constellation

Automated only

Code Intelligence Platform for AI Coding Agents

Repository Third-party · npm

Install

npx @constellationdev/mcp

Running any third-party MCP server executes its code with the permissions you grant it. A grade reflects our findings at the “last verified” date below — verify independently before installing in a sensitive environment.

Should you install this?

Freshness (good, 85/100), Maintenance (poor, 53/100), Provenance (good, 80/100) so far. Safety hasn't been assessed yet — this is a partial picture, not a complete grade.

Last verified 2026-08-13

Dispute this grade

73/100 overall

§1Freshness

Last commit: 2026-08-10T04:01:41Z2026-08-13 · GitHub
Last release: 2026-08-10T04:01:29Z2026-08-13 · GitHub
Endpoint status: unknown (No scan data yet)2026-08-13 · Security scan

§2Maintenance

1 human contributor(s).2026-08-13 · GitHub
Last release: 2026-08-10T04:01:29Z2026-08-13 · GitHub
Repository has never had an issue opened — rate not measurable, neutral half-credit2026-08-13 · GitHub

§3Provenance

Registry namespace verified.2026-08-13 · MCP Registry
Not from a known official vendor.2026-08-13 · MCP Registry
Package has a verifiable build attestation.2026-08-13 · npm registry

Alternatives

Grade history

Historical grade tracking becomes available once this server has been through at least two sync cycles — the longitudinal dataset is what answers “is this server getting worse?”

Maintainer of this server? Dispute a finding or trigger a re-scan after a fix.

How disputes work Claim this listing