PulseAugur
中
实时 13:33:46
English(EN) Five MCP servers were archived 17 months ago. Their downloads have quadrupled since.

已归档的MCP服务器下载量翻番,使用户面临未修补漏洞的风险

尽管五个模型上下文协议(MCP)服务器——GitHub、PostgreSQL、Slack、Puppeteer和Brave Search——在17个月前已被归档,但它们的下载量却翻了两番。这些已弃用的软件包仍被安装和使用,自归档以来下载量达数百万次。在PostgreSQL服务器包中发现了一个关键的SQL注入漏洞,尽管该漏洞在服务器归档的同一天被合并修复,但从未发布到npm,导致已弃用版本的用户面临风险。 AI

影响 强调了在代理设置中使用未维护的软件依赖项的风险,可能影响AI系统的安全性和可靠性。

排序理由 文章讨论了已弃用软件包的持续使用和下载增长,并强调了其中一个软件包的安全漏洞,这属于软件维护和安全工具的范畴。

在 dev.to — MCP tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

已归档的MCP服务器下载量翻番,使用户面临未修补漏洞的风险

本文如何被排名

Signal score
13 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
文章讨论了已弃用软件包的持续使用和下载增长,并强调了其中一个软件包的安全漏洞,这属于软件维护和安全工具的范畴。
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

  1. dev.to — MCP tag TIER_1 English(EN) · Srinathprasanna N S ·

    五个MCP服务器于17个月前归档,下载量自此翻了两番。

    <p><em>What your agent reads, part 6. You approve an MCP server once. This series is about what happens after.</em></p> <p>On 29 May 2025, the Model Context Protocol project archived 14 of its reference servers. The commit is titled "Archive unmaintained servers". Five of them, G…