Local build artifact size and dependency weight inspection without file content output. Tools...
About
Local build artifact size and dependency weight inspection without file content output. Tools...
Security Report
Artifact Gauge is a local, stdio-only MCP server that reads filesystem metadata (paths, sizes, extensions, manifest filenames) and deliberately withholds file contents, versions, and secrets, with no network access, shell execution, or hardcoded credentials. The main concern is that the default scan boundary is the parent of the working directory, which is broader than a single project and lets a caller enumerate metadata beyond the intended project. Remaining findings are low-severity and mostly about defense-in-depth. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
5 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Install instructions and configuration are available after purchase.
Documentation
View on GitHubFrom the project's GitHub README.
artifact-gauge-mcp
Artifact Gauge is a local MCP tool for answering a simple release question: what is taking up space? It reports artifact totals, extension histograms, largest files, and dependency manifest metadata without returning file contents.
Tools
inspect_artifacts: scan a bounded local project and summarize file sizes and types.inspect_manifest: report metadata for one recognized dependency manifest without exposing its contents or dependency versions.
Safety
- Local paths only, with
ARTIFACT_GAUGE_ROOTboundary support and symlink checks. - Skips Git data, dependencies, coverage, framework caches, and other common generated caches while intentionally including
distandbuildartifacts. - Caps recursion, file count, file size, and output.
- Never returns file contents, package versions, secrets, or source text.
- This is a size heuristic, not a complete bundler or dependency vulnerability analyzer.
Run
npm install
npm run build
node dist/index.js
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.