https://pypi.org/project/mcpdone-audit/ Recent updates to the Python Package Index for mcpdone-audit en https://pypi.org/project/mcpdone-audit/0.6.0/ Static analyzer for MCP server repos: 4 checks (BadHost / Starlette CVE-2026-48710, FastMCP wrapper-layer asyncio.run bug, loose @mcp.tool() schemas, subprocess command-injection w/ cross-function taint propagation). Wed, 01 Jul 2026 19:14:15 GMT https://pypi.org/project/mcpdone-audit/0.5.0/ Static security + correctness audit for MCP server repos. Ships four checks. v0.5 fixes a v0.4 false-positive family where list-concatenation (e.g. `["kubectl"] + args + ["get"]`) was misclassified as string-interpolation in command_injection. Tue, 30 Jun 2026 17:40:51 GMT