{"_id":"@polygraphso/litmus","_rev":"48-b9f058019a2a450b98f0b4dfae015baa","name":"@polygraphso/litmus","dist-tags":{"latest":"0.36.0"},"versions":{"0.2.0":{"name":"@polygraphso/litmus","version":"0.2.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.2.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"ea6ee96e0da051988846646c0b72e81976a38adf","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.2.0.tgz","fileCount":17,"integrity":"sha512-7HD8Rkok1h1dBt9tP2n9TxyfhOzJbWDps2OhTVS/1xwdV3gg0uHjasEBNKKjviqgnV1hS7WM1/JKphfh9ufxiQ==","signatures":[{"sig":"MEQCIBcp0omHhbJThIkH1QCU1Y2HkFVl65nMCF4SJwps+W6mAiB49a77iLFmhDq8T4kLDhXHULX/fCjpEo6smdq68uCByw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":129465},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.2.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/57efcc327c068a97f0619e97549aba62/polygraphso-litmus-0.2.0.tgz","_integrity":"sha512-7HD8Rkok1h1dBt9tP2n9TxyfhOzJbWDps2OhTVS/1xwdV3gg0uHjasEBNKKjviqgnV1hS7WM1/JKphfh9ufxiQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data), then hand off to mint an onchain attestation. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.2.0_1781608599186_0.22458475908624775","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@polygraphso/litmus","version":"0.2.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.2.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"ae05a297a0e25c8e625d05975785d7ff84425653","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.2.1.tgz","fileCount":17,"integrity":"sha512-pvaJ5ci1W2sj2/setv5LrnBTt7Rrvxur0+ZdpY0BkhZpyG2g6kWoxqcnUxqKrLFnXXhgridYN3fkb03qtA9RsA==","signatures":[{"sig":"MEYCIQCoRo74JofxOFpaYAEPxguFHib2zwlcvbu3eDwgFh+qTwIhAMcwPiCixKQU7YLt8z8OGM6gzYf0EJAbFLXkY3lKdyCT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":127966},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.2.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ed6de0d513c18464ef223b6c230f466d/polygraphso-litmus-0.2.1.tgz","_integrity":"sha512-pvaJ5ci1W2sj2/setv5LrnBTt7Rrvxur0+ZdpY0BkhZpyG2g6kWoxqcnUxqKrLFnXXhgridYN3fkb03qtA9RsA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data), then hand off to mint an onchain attestation. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.2.1_1781609722906_0.2244800958940394","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@polygraphso/litmus","version":"0.3.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.3.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"351dd6c33faae7752fdaa12143c5c20e9916d9f2","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.3.0.tgz","fileCount":17,"integrity":"sha512-bA3bqpLEjs59YDZaO9zQilpdNWWdiRRH9CW19ruVSDyuRKlcmdIFL9KD5TTNaerGjkhuKm7JmJPcTvvVLnbnBg==","signatures":[{"sig":"MEYCIQD8eJnutpoqSXqmVg2YQwf4KT7i7VRGi1B4n1vT36lcmwIhAIjT4lEY7/HO3pj1rxfJ2yjHLKhZnpFHhuecWVTsdPsW","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":124878},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.3.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/f832b3044ae64b9dbf60427f9bcb9028/polygraphso-litmus-0.3.0.tgz","_integrity":"sha512-bA3bqpLEjs59YDZaO9zQilpdNWWdiRRH9CW19ruVSDyuRKlcmdIFL9KD5TTNaerGjkhuKm7JmJPcTvvVLnbnBg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.3.0_1781624209500_0.059058037504508665","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"@polygraphso/litmus","version":"0.4.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.4.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"56a4087a9f0572ba7653f2e8c04d9defdfd8d413","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.4.0.tgz","fileCount":17,"integrity":"sha512-qbudCNdyMytei3JDa/k4D5DsDOppskhNksnsiG3ObPuYFRFg5oFLX7eK5wlRWR1Qk2+m3R9KSdnM5kT3VD1sZw==","signatures":[{"sig":"MEUCIQCqQ/DoiF3HwMpnDcyYjSOyjt7MHxj2dXOAfJx7j/V+LwIgYDxn/Cdizt704qwWMEBkHObd6HrPlTekLTeIpbVteiQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":133620},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.4.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/9364c0cf752a3726e5b9b057f211c591/polygraphso-litmus-0.4.0.tgz","_integrity":"sha512-qbudCNdyMytei3JDa/k4D5DsDOppskhNksnsiG3ObPuYFRFg5oFLX7eK5wlRWR1Qk2+m3R9KSdnM5kT3VD1sZw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.4.0_1781632037486_0.13035788917032165","host":"s3://npm-registry-packages-npm-production"}},"0.4.1":{"name":"@polygraphso/litmus","version":"0.4.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.4.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"46e8a92ecab9884690505154b5165cea905876c5","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.4.1.tgz","fileCount":17,"integrity":"sha512-aza58nt5h1UzYnei4nlkZ+2NRN43swwDHcZtcFPtcIJzRKAkjP3sI1nCDgfxJMUsWkL8tQEPSPUR32tQQvHnyw==","signatures":[{"sig":"MEUCIQDJ1nQBriK/4MuuHKkBnn9FC4K6teQV380OrtPx2Hi0kgIgXdKh9kv7Eg9me6PEHpGgyMe3chu6pPjyAB41UIylDtM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":133685},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.4.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/2587a831025c0ed5953e00e96775c0f2/polygraphso-litmus-0.4.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-aza58nt5h1UzYnei4nlkZ+2NRN43swwDHcZtcFPtcIJzRKAkjP3sI1nCDgfxJMUsWkL8tQEPSPUR32tQQvHnyw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.4.1_1781633806715_0.4465934441214503","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"name":"@polygraphso/litmus","version":"0.5.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.5.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"22eb3744c1146d1d0d0bc07e2ea5fd0819157c85","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.5.0.tgz","fileCount":17,"integrity":"sha512-S7OReWDyLN1LlWtrdJ+3ZRECYChv+IUrhSQOlYL8FyQYpLmzZ+Lh/9oUpws6FoLInAtbfCYa+AYjkoAixPMXEA==","signatures":[{"sig":"MEQCIDomJ4v+P+I92xXMZql4K/C1xL++B3lhf56Mg56bqPoFAiAWIvh+daIcXilfh2oIZR/Q8S3Crt4Rq6JNAiK/RJgA+Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":146637},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.5.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/63a7abdb786493989c78eefb5b395520/polygraphso-litmus-0.5.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-S7OReWDyLN1LlWtrdJ+3ZRECYChv+IUrhSQOlYL8FyQYpLmzZ+Lh/9oUpws6FoLInAtbfCYa+AYjkoAixPMXEA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.5.0_1781691260193_0.9594810749792981","host":"s3://npm-registry-packages-npm-production"}},"0.6.0":{"name":"@polygraphso/litmus","version":"0.6.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.6.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"b726afbf1b3c72ffa6ea2c38c412d891a7f83e3d","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.6.0.tgz","fileCount":17,"integrity":"sha512-nqHFI+usmY0G63tV0iVbcAvL1DIhDA8xQOIAWIxXXV9aSxnVhmM2Wry8qSIBcDTUGnge+CNQo5hMbPvOTmqZQQ==","signatures":[{"sig":"MEYCIQC8JFIlzXmL1GaFaAvGhAXe5PrF1TRY6PWZRY/ZQuIT3QIhAM+QAe1OhaA4iXwhUe1qMLrW+7bBRAMYMsEGtvFI0q8b","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":145893},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.6.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/2a4cd66f34a7c8fc2bd2174b26672222/polygraphso-litmus-0.6.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-nqHFI+usmY0G63tV0iVbcAvL1DIhDA8xQOIAWIxXXV9aSxnVhmM2Wry8qSIBcDTUGnge+CNQo5hMbPvOTmqZQQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.6.0_1781695705861_0.145818964197296","host":"s3://npm-registry-packages-npm-production"}},"0.7.0":{"name":"@polygraphso/litmus","version":"0.7.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.7.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"ea02a462c93d3ddeb9a3824cb31b29c0256a7f8c","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.7.0.tgz","fileCount":17,"integrity":"sha512-wgt//K2AE1TvyQLUouWi2mJbpVwb9GyfWTyAjEVob1zhuWxK7VBa3uKa9g/74I+rYJzQTsbAIHUdDgClOZFbRw==","signatures":[{"sig":"MEUCIQDOL4wqVEeO8sHm9Pyu4BSrrgjaHA72Qf3j++M15JTLSAIgfPDdjWem/93I26qAMTKzu6ILKj+aFM7Y69mt/htXgV4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":155331},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.7.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/771c25adc4177650a11e370f24a19ab6/polygraphso-litmus-0.7.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-wgt//K2AE1TvyQLUouWi2mJbpVwb9GyfWTyAjEVob1zhuWxK7VBa3uKa9g/74I+rYJzQTsbAIHUdDgClOZFbRw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.7.0_1781706582700_0.12006117449743692","host":"s3://npm-registry-packages-npm-production"}},"0.8.0":{"name":"@polygraphso/litmus","version":"0.8.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.8.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"d40bf88cb41af7f11c9e1f4609d5b8c66c609d33","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.8.0.tgz","fileCount":17,"integrity":"sha512-fOt+MLOip0NO67aVMY8vuWCM3o5ksPcKCVw/2GGtfKMZs4Vmzx3DGU1FDW+KBo9MOhZtn82NYrFQL3n9jrBSaw==","signatures":[{"sig":"MEQCIFgB9C7vZE282MGGtkLOZLcgoalusj4OO/KDLM9pSrmZAiB1UZi32jScJddox6JNNs2vpenu7yN1w9OhGHrqvEzmCQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":163454},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.8.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/eab2efaa3f0e03ec71c3c6cdbb288a56/polygraphso-litmus-0.8.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-fOt+MLOip0NO67aVMY8vuWCM3o5ksPcKCVw/2GGtfKMZs4Vmzx3DGU1FDW+KBo9MOhZtn82NYrFQL3n9jrBSaw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0","@ethereum-attestation-service/eas-sdk":"^2.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.8.0_1781707537271_0.9753575737282476","host":"s3://npm-registry-packages-npm-production"}},"0.8.1":{"name":"@polygraphso/litmus","version":"0.8.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.8.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js"},"dist":{"shasum":"606ff67eabcb15a113b4e2f0b56c320c2a9942cf","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.8.1.tgz","fileCount":17,"integrity":"sha512-0BUSPmgFh5Dde21kuEHG4GypxfLvqtGGwaHp0h6Adr6aePSQjHwvb7nJjIKxjpcHONDpznu12M83ptekBqj4Bw==","signatures":[{"sig":"MEYCIQDWPnvQWA1MxvrXWSH9AvbpB/MhIyGJQD8F2JtQ3881aAIhAMvr8OEcJF20KyQ0/Ho/U2H8esclZnrwQmF1Jk5sRWL9","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":164163},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.8.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/0b417630d3e174aadf833e375291c4f8/polygraphso-litmus-0.8.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-0BUSPmgFh5Dde21kuEHG4GypxfLvqtGGwaHp0h6Adr6aePSQjHwvb7nJjIKxjpcHONDpznu12M83ptekBqj4Bw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.8.1_1781717062477_0.9617381305037962","host":"s3://npm-registry-packages-npm-production"}},"0.9.0":{"name":"@polygraphso/litmus","version":"0.9.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.9.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"06fbe955a7f5813cd91abf81f39e18e8d1ab9ae0","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.9.0.tgz","fileCount":19,"integrity":"sha512-YitFjOVyyzf+gghckJHTusuIcNcbJyxAOL/iSjhvw35zHm0qhQ7Pj2Vubac72W0kkxvSN6IKJnymGZz6pzunWA==","signatures":[{"sig":"MEUCIQCAsvrK4TL5pnlBQdNwwfZtyo8VZHR1maVe+LjEBNK69gIgCr++qE813Zq3abrkuMKZt+zT424wbiX5d5KD6I45oWY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":233194},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.9.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/8541da5031ac93ba850461ece5a1fecd/polygraphso-litmus-0.9.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-YitFjOVyyzf+gghckJHTusuIcNcbJyxAOL/iSjhvw35zHm0qhQ7Pj2Vubac72W0kkxvSN6IKJnymGZz6pzunWA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.9.0_1781727488284_0.9727783626958042","host":"s3://npm-registry-packages-npm-production"}},"0.9.1":{"name":"@polygraphso/litmus","version":"0.9.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.9.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"3d451eecbcbd5bc77d59bd155043f3adba98c397","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.9.1.tgz","fileCount":19,"integrity":"sha512-bKFHsqK8Jciezn6IHPaWvmUzVhN2bD5g5eADj4ObwMZW8c1dTGw7cJt3fe+y4js/Dg0wng52HbBf+NXmGf3CWw==","signatures":[{"sig":"MEYCIQD7VGB1Q5sJW58YWyrxsxTlCk4VongVsBxMVweODOHpAwIhAP3JzajvvYerc1S9R8Gry0kiyE0p/Sd3JaZf9AJRfrAp","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":234146},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.9.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/626284cecc4de890ec2a6e8a963f5e17/polygraphso-litmus-0.9.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-bKFHsqK8Jciezn6IHPaWvmUzVhN2bD5g5eADj4ObwMZW8c1dTGw7cJt3fe+y4js/Dg0wng52HbBf+NXmGf3CWw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.9.1_1781736135012_0.04871338097516942","host":"s3://npm-registry-packages-npm-production"}},"0.10.0":{"name":"@polygraphso/litmus","version":"0.10.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.10.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"cd99808914e9798c1b5c6cf5a6818addf25642a9","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.10.0.tgz","fileCount":19,"integrity":"sha512-40D53mDlotQmJG0Wws2zHRttcYIdWIrxbGhGf0dLLtyMaiBx1KYo3ZSF1TGhuPA/CWExGz4h5TW9e/n1qdtZig==","signatures":[{"sig":"MEQCIGOG5I0VjchBt9iD15rrIZ6S4nyYb1QHI/J+MDMbE83VAiAN+sqLzjPN3HPpll/mSth20d0crPa8CVxxmyQLsE0XTg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":239532},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.10.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/756530620a639400be8631fe3098f9ed/polygraphso-litmus-0.10.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-40D53mDlotQmJG0Wws2zHRttcYIdWIrxbGhGf0dLLtyMaiBx1KYo3ZSF1TGhuPA/CWExGz4h5TW9e/n1qdtZig==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.10.0_1781777298253_0.41212551517889184","host":"s3://npm-registry-packages-npm-production"}},"0.11.0":{"name":"@polygraphso/litmus","version":"0.11.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.11.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"df75070b95afe38285f1c8ed37848113a55909fd","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.11.0.tgz","fileCount":19,"integrity":"sha512-LvE8zOn3AvAKTrgHmD1ZCUxNENxfPYgBfdNrhTaDzNEyeifaG5q1sXb2yVWZX0BIzxC/AZa1jz5Nl/NPGABe2w==","signatures":[{"sig":"MEUCIDCOH77OYA376MLNPhcyVj2bq/XhWIbkcW418eYwbn3CAiEAwPu3WwfcUsxU4lFybwwEXEQbabCz6698ii1JfN5+++Y=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":244537},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.11.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ad3bc67df6a8aef02d3b833457746025/polygraphso-litmus-0.11.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-LvE8zOn3AvAKTrgHmD1ZCUxNENxfPYgBfdNrhTaDzNEyeifaG5q1sXb2yVWZX0BIzxC/AZa1jz5Nl/NPGABe2w==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.11.0_1781787318244_0.4815116964434851","host":"s3://npm-registry-packages-npm-production"}},"0.12.0":{"name":"@polygraphso/litmus","version":"0.12.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.12.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"b51b7ce49880331c1108aa06ac74a1b55a0dc3c6","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.12.0.tgz","fileCount":19,"integrity":"sha512-UqAbUBAUgcZ3vRb7pEEdU19sTNVNlgZZBwBYbPASR1Yvzv9I7N8g6MP/pq5DQ9ox+6TqCQonaR6900nRUa3Afg==","signatures":[{"sig":"MEQCIGSx6LZoaboX7BkxIlA+xrSRHTwyCdgsf8rqNS/FmkSkAiACPvPjB4T3yNZma8/9EZeo1beAJl5/RPpi+Ra6cPsAzQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":246079},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.12.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/4d1db521ab60f46d62b34f2f156aca26/polygraphso-litmus-0.12.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-UqAbUBAUgcZ3vRb7pEEdU19sTNVNlgZZBwBYbPASR1Yvzv9I7N8g6MP/pq5DQ9ox+6TqCQonaR6900nRUa3Afg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.12.0_1781793730939_0.04570786362817114","host":"s3://npm-registry-packages-npm-production"}},"0.12.1":{"name":"@polygraphso/litmus","version":"0.12.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.12.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"f2d55f6ead2b443a55d01e6701aafc7df5b573cb","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.12.1.tgz","fileCount":19,"integrity":"sha512-J/2m3DSBycSrIWo7yXdVaLzheajCuh13t1H8gmWG58jZyCkJOvyLskWB3ruDegSftGHLMlHyoHseSOhAoaufYg==","signatures":[{"sig":"MEYCIQDJLLhxzKtvmHfVRVEPRxql2GSy0HofR9p6LyLRBMoQfAIhANe8NJRKnpHvkVOx+B/2eVf7pHYom/GBbJLyEZR3Jiru","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":246530},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.12.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/455b9451257c24c635200c793a3f3024/polygraphso-litmus-0.12.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-J/2m3DSBycSrIWo7yXdVaLzheajCuh13t1H8gmWG58jZyCkJOvyLskWB3ruDegSftGHLMlHyoHseSOhAoaufYg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.12.1_1781874370956_0.19434974901802748","host":"s3://npm-registry-packages-npm-production"}},"0.13.0":{"name":"@polygraphso/litmus","version":"0.13.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.13.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"8273e8baa7799fc5d8e9c8e87b42f25edb0afebc","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.13.0.tgz","fileCount":19,"integrity":"sha512-8j4UTrGJaS3b8Ly/MVmC08GxsnVw7sG/AhVGdyYx14euJWGKoi9czJoonHO0NT0wKldBnKK9/xeZvfhdVCj7zA==","signatures":[{"sig":"MEUCIQCUdl2w2O+9LXnVemOGb7IhT/vzd22vFp737x95wIpo3QIgMsRZ3pdOf0rYTgoloRHECZpbEYVI4cI+8EBE+Y4bKyI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":261495},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.13.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/b6283d2754164be1cba227322a0154e2/polygraphso-litmus-0.13.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-8j4UTrGJaS3b8Ly/MVmC08GxsnVw7sG/AhVGdyYx14euJWGKoi9czJoonHO0NT0wKldBnKK9/xeZvfhdVCj7zA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^2.1.0","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.13.0_1782211019820_0.0697341839849348","host":"s3://npm-registry-packages-npm-production"}},"0.14.0":{"name":"@polygraphso/litmus","version":"0.14.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.14.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"1852e9eb3c243e864ef8581ab05e5f69ad1bc5e1","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.14.0.tgz","fileCount":19,"integrity":"sha512-ls21mbdDEvxfSy4IZqK4EMP33VFlzcuAVt+/PZEhbf474vLyG97nVcCG1hMQ7gAoLFlwGgvI4ByEEFcLG+VLKQ==","signatures":[{"sig":"MEUCIDPWGC6GPgAQg1oNQzFVRercNx8ArJbzzWspazjN/35vAiEAkoOT2y7Ryr7gvJ4L1kbgIW3V9DnaJTX3zNPcD8wRQf4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":280249},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.14.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/2c9dbafb511730f207c345cfdb622c8b/polygraphso-litmus-0.14.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-ls21mbdDEvxfSy4IZqK4EMP33VFlzcuAVt+/PZEhbf474vLyG97nVcCG1hMQ7gAoLFlwGgvI4ByEEFcLG+VLKQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.14.0_1782296498357_0.2376232408493788","host":"s3://npm-registry-packages-npm-production"}},"0.15.0":{"name":"@polygraphso/litmus","version":"0.15.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.15.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"908c5f63b14584f93374fc1ee1143692eb3b89c4","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.15.0.tgz","fileCount":19,"integrity":"sha512-t5qjAlomvSUtGjMfMUrk7LWB14SQGDwFBvmf5//bMoJxVF1PCTlYSJAu8I8X4zu5jbD7WyUIbSqfAb9+FdnP+Q==","signatures":[{"sig":"MEUCIQC11Pmu6aBSuDW/Adi9jCpK7oq4jqsal7HRD00D1L1dEgIgPs7/301NUtRJS+6zrL79dw+JqPEHURo2Nm8Z1WPw1Zk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":280397},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.15.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/a5602e114a468a2b7c97861b3d9dc27c/polygraphso-litmus-0.15.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-t5qjAlomvSUtGjMfMUrk7LWB14SQGDwFBvmf5//bMoJxVF1PCTlYSJAu8I8X4zu5jbD7WyUIbSqfAb9+FdnP+Q==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.15.0_1782297253928_0.2544387074336254","host":"s3://npm-registry-packages-npm-production"}},"0.16.0":{"name":"@polygraphso/litmus","version":"0.16.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.16.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"85d8b818d32e6a908b4d73a88cdef493c02e039d","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.16.0.tgz","fileCount":19,"integrity":"sha512-94ya5Ax3s2xh7XOnhmEY8hViCnEzXvVZPCXCvbpdp79ffTbKxOZ+r94U+UUk0eC5VkGvn7bVU6qRojWhaewwEA==","signatures":[{"sig":"MEQCIA7No3kh73BaMXkPtPeWKh5LG0qBEHMZG9yXvjR2ng3/AiBpMFUjouUppFTJnJDk/umtzaT/2USxE/Eg43/doPAiZg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":283299},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.16.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/b22e81bd0f5282ba25cba6e2fca557bf/polygraphso-litmus-0.16.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-94ya5Ax3s2xh7XOnhmEY8hViCnEzXvVZPCXCvbpdp79ffTbKxOZ+r94U+UUk0eC5VkGvn7bVU6qRojWhaewwEA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.16.0_1782314185292_0.8613266629250989","host":"s3://npm-registry-packages-npm-production"}},"0.16.1":{"name":"@polygraphso/litmus","version":"0.16.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.16.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"db1d70c7ab660b3f4e489e7867e3cd85a32e4e71","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.16.1.tgz","fileCount":19,"integrity":"sha512-CNctnCfCTomVl7XFLTJJZJ0uG4EvAZP0k7wwrgO00fv/+Q3SThm3t7CD8FOMxAJ3vyXVejFET2gCZGYRLTy0lA==","signatures":[{"sig":"MEYCIQC10pxhKbH2YmpcTRPwjGw9dfuito/+DTOZSs40iu6RNwIhAIhGAc6KU/bndbyzo4lsgQnGjpvYiz6ptLILT8IBdNFE","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":284319},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.16.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/234bbc6a76acc80e0d8be8bd25d9f0a2/polygraphso-litmus-0.16.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-CNctnCfCTomVl7XFLTJJZJ0uG4EvAZP0k7wwrgO00fv/+Q3SThm3t7CD8FOMxAJ3vyXVejFET2gCZGYRLTy0lA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.16.1_1782329158062_0.7599809320961308","host":"s3://npm-registry-packages-npm-production"}},"0.17.0":{"name":"@polygraphso/litmus","version":"0.17.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.17.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"bca53c9fe327cf7c43718b9cb697480cc6008717","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.17.0.tgz","fileCount":19,"integrity":"sha512-prrbiYKzCawqfJVzHvbNel3QnZv6e59iEiw2Vs/Zqg2nkkP9R417ywCqz+YLundDGvEU4F25mldLuLHHLytpvg==","signatures":[{"sig":"MEUCIQDtGeHIGzX12Gnkvrf4vfaitJDMZPAiAZR6k+p45Ah8RAIgXuL0W2PGwxbe6Ve4vm355jnpPI9xWWMM1RvcYVGh3/E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":285583},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.17.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/22130e40f520f2e37e1a4acfc3c62a99/polygraphso-litmus-0.17.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-prrbiYKzCawqfJVzHvbNel3QnZv6e59iEiw2Vs/Zqg2nkkP9R417ywCqz+YLundDGvEU4F25mldLuLHHLytpvg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.17.0_1782344452060_0.5704291305733216","host":"s3://npm-registry-packages-npm-production"}},"0.17.1":{"name":"@polygraphso/litmus","version":"0.17.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.17.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"c01d6cf0c9a2283c0b4924e6b040a1d9c6f77905","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.17.1.tgz","fileCount":19,"integrity":"sha512-AHwbwtGfjid4grrrmhU2XOGgpHRyR4hiVHQbE4rWaOAfoULSeydKbRDMQI2hoTgr9+8MfYfY1T+wdJZpv6vhCA==","signatures":[{"sig":"MEQCIGfCzl1x2MOOybyhwW6lrPj4MYJ7v4ZSfY+2InKh1EajAiBBUcF/hSJz/KgE4Ro5Yhlbbkxvu70aYMliZlPSyBAnnA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":286655},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.17.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ee712b3d2a71b0d3fc3bfb343a46c502/polygraphso-litmus-0.17.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-AHwbwtGfjid4grrrmhU2XOGgpHRyR4hiVHQbE4rWaOAfoULSeydKbRDMQI2hoTgr9+8MfYfY1T+wdJZpv6vhCA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.17.1_1782392540853_0.5182279768941653","host":"s3://npm-registry-packages-npm-production"}},"0.18.0":{"name":"@polygraphso/litmus","version":"0.18.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.18.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"7e229823306666c1a818652bc6dbd8bcaadce78d","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.18.0.tgz","fileCount":19,"integrity":"sha512-M2syzxZZfOBjUT1iQiqHyaD/PqUjsCGWBhVuCWdrlKcOLQMBcJKKzOVoFASYkhdAwLMZX6LNJumGhv9BPwh6Fg==","signatures":[{"sig":"MEUCIQDFiRy0i04VaiopHYNQnOz1aGpf/dipyeVh3Jul/K01sgIgEm5169SSADt1Sh/4uxlwTFJMtD0Dv5wynsN+vOJ7pwI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":297393},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.18.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/cfa6617deb392db220f9d05607a2767d/polygraphso-litmus-0.18.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-M2syzxZZfOBjUT1iQiqHyaD/PqUjsCGWBhVuCWdrlKcOLQMBcJKKzOVoFASYkhdAwLMZX6LNJumGhv9BPwh6Fg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.18.0_1782397333780_0.9622244450765394","host":"s3://npm-registry-packages-npm-production"}},"0.18.1":{"name":"@polygraphso/litmus","version":"0.18.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.18.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"5e83a2ec6eb4cc1ccaa85367f00c054109c1c913","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.18.1.tgz","fileCount":19,"integrity":"sha512-sTShbwf6t/ShehlaanlVOfcdmXSPPvl/l5pGHiSJ3/1UzL8EuBW0tQNv/ZPtO8EKpmVoLHkgy9YxkwshitOaFA==","signatures":[{"sig":"MEYCIQDaGkMNctn9bgp68YZGjLGRpRJLaPkTZvrEd7Eq8eVy3AIhAKd6p2HTHHeBdbOsNdz6sU3GNMHoho/Val1/Gebxuz61","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":297393},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.18.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/aa83724aaeccc40399f2b40aae9f0978/polygraphso-litmus-0.18.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-sTShbwf6t/ShehlaanlVOfcdmXSPPvl/l5pGHiSJ3/1UzL8EuBW0tQNv/ZPtO8EKpmVoLHkgy9YxkwshitOaFA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.18.1_1782400975787_0.5975493419419995","host":"s3://npm-registry-packages-npm-production"}},"0.18.2":{"name":"@polygraphso/litmus","version":"0.18.2","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.18.2","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"c753567f4d144968a89add11646a33d84c50a752","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.18.2.tgz","fileCount":19,"integrity":"sha512-4Os9+RwOt9yDGATYPmGbLL8YO58d0NDnRWAKF9rK14kOsTqAHfvrXlosk7D2N0Y7icPFkDFggPFszrfEBqujzQ==","signatures":[{"sig":"MEUCIDNWP0i8RC+Fh923mQ8v5Y2IasQaX+IHNycnTRZmp0rOAiEAxh1PO4Oon6htR7ExwmdRVSpgr1A2Q1vPGkER45S/9lA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":297393},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.18.2.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/578b6490659c727a60074ca08c3f8c48/polygraphso-litmus-0.18.2.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-4Os9+RwOt9yDGATYPmGbLL8YO58d0NDnRWAKF9rK14kOsTqAHfvrXlosk7D2N0Y7icPFkDFggPFszrfEBqujzQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.18.2_1782427814129_0.5343935472907881","host":"s3://npm-registry-packages-npm-production"}},"0.19.0":{"name":"@polygraphso/litmus","version":"0.19.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.19.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"85ccba4f4e02c96ef66751879c01d981038390f7","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.19.0.tgz","fileCount":19,"integrity":"sha512-KG6om4MlTtWlrOCxcT/e4+BE7BcfqniO+JICNVAbnnBGOyK5YZ7I7vilUNSPEPlKnB7UFlXAoNgp5M1OjARmRA==","signatures":[{"sig":"MEQCIDcbqxVgxLoMPHQ1C+J7lrWxqPD9mDnmqDN1YWB07g2UAiAyIXU2gQF9BpUo6Vkry0guf6YOhiizPQBSLLuPz227Rg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":297437},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.19.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/aa13a4064a2facbf852171f68193fc60/polygraphso-litmus-0.19.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-KG6om4MlTtWlrOCxcT/e4+BE7BcfqniO+JICNVAbnnBGOyK5YZ7I7vilUNSPEPlKnB7UFlXAoNgp5M1OjARmRA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.19.0_1782430232127_0.6838743963714318","host":"s3://npm-registry-packages-npm-production"}},"0.19.1":{"name":"@polygraphso/litmus","version":"0.19.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.19.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"d5ea22284d6d8119596c8725c237a41834e33879","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.19.1.tgz","fileCount":19,"integrity":"sha512-bNULG/pDEEIKl+deZVLX5Ahev+/aazGhCziJtN2XK/FVJj1YXRUEDq4urATC9Fm4DjRuB/kZFljCZYKyS6WQ2A==","signatures":[{"sig":"MEYCIQD0R12UqCEYilNRRelcwmPcRzd6N9qcUqDvSVzs9BDpdQIhAM00e4/oX9VWm9p33mq5tYAh0ujRjcLNtua8uz2KHRb4","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":297462},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.19.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/65baf6b34f5c37a9f0561c5fee60c610/polygraphso-litmus-0.19.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-bNULG/pDEEIKl+deZVLX5Ahev+/aazGhCziJtN2XK/FVJj1YXRUEDq4urATC9Fm4DjRuB/kZFljCZYKyS6WQ2A==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.19.1_1782460355926_0.05277921698270438","host":"s3://npm-registry-packages-npm-production"}},"0.20.0":{"name":"@polygraphso/litmus","version":"0.20.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.20.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"9222138e0c88a3b0acf9f7923bd7403e7b722d9a","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.20.0.tgz","fileCount":19,"integrity":"sha512-iwPPiJA5FGn4/CxNq0a3yBz6V1eNn8qd8vinjJSs8brxGjbw3yM9aHWgyWS7zx0745rTJx+5XS1cGOtSC7jJCA==","signatures":[{"sig":"MEQCIFF03UeKuY5aDPr5RL4EjleF5H1Vxh6jUAzcB7KCU/XWAiArggi8Jje5MkBlau645oQpaddfgVSlKX7SVbskSdJL6Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":302707},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.20.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/505b4ee523fdadb583705bfeb296ec89/polygraphso-litmus-0.20.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-iwPPiJA5FGn4/CxNq0a3yBz6V1eNn8qd8vinjJSs8brxGjbw3yM9aHWgyWS7zx0745rTJx+5XS1cGOtSC7jJCA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.20.0_1782746264311_0.8357461303429377","host":"s3://npm-registry-packages-npm-production"}},"0.21.0":{"name":"@polygraphso/litmus","version":"0.21.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.21.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"39c4ee57805131de1eac84aec50db966e448f094","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.21.0.tgz","fileCount":19,"integrity":"sha512-VVfk3ksxL/RVgp3oIcFmBlqdiDrudbA8/d0rUO4wjGZ+V5hZ/fqIRll6FdQbfAg7PS0oOKy5Y0typJEKKcReDA==","signatures":[{"sig":"MEUCIQCBLm4TwweIQrfZjmFdOmtbnIZGT2cYyti6HVrc3iPCjgIgDgR3FGfMP1CE5hNfoMxLQxupzW/QulclHjAxLY40STk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":305959},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.21.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/2368402bc0a7f97372573892e9fbaa3c/polygraphso-litmus-0.21.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-VVfk3ksxL/RVgp3oIcFmBlqdiDrudbA8/d0rUO4wjGZ+V5hZ/fqIRll6FdQbfAg7PS0oOKy5Y0typJEKKcReDA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.21.0_1782821092733_0.028695364474397245","host":"s3://npm-registry-packages-npm-production"}},"0.21.1":{"name":"@polygraphso/litmus","version":"0.21.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.21.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"38070b1902be6838f93b537ee333f50d2dd145fd","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.21.1.tgz","fileCount":19,"integrity":"sha512-TlZpmwa857gJZmW51NbWpnhyxBm/8TLOaFoGS9epNtPkmvsG/t8Wfd35Z5uXQMepIYYonKuhBLxwzEJCQfIrmw==","signatures":[{"sig":"MEYCIQCHe3htWSVBKDV9DoxZ4V6JmIfKHB+O/qOIbDcXdLPUgQIhAJc9BakGcXovZOM3KaN9QSJkfgDF6KVnlo2cejqpgS23","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":306220},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.21.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/7d96718c0bb44d13e832d0383e0ec7aa/polygraphso-litmus-0.21.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-TlZpmwa857gJZmW51NbWpnhyxBm/8TLOaFoGS9epNtPkmvsG/t8Wfd35Z5uXQMepIYYonKuhBLxwzEJCQfIrmw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.21.1_1782826666954_0.8452103624157143","host":"s3://npm-registry-packages-npm-production"}},"0.22.0":{"name":"@polygraphso/litmus","version":"0.22.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.22.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"1230d9ef7336b8e50257800d2b9fc0c5747a7f6a","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.22.0.tgz","fileCount":19,"integrity":"sha512-8vqrFhtZQ9SfTy28GskFwdOY6gBHYPPbW021pjVLC8rA+vkNvwALZACVkOw2x2V2XEA4IlMNV+UFsbQnNhheJA==","signatures":[{"sig":"MEUCIQCmoWcg3LdDitgbpZwy1OlufbJjo88uxwB4OVYyEJs5zgIgFFbYpSMveAtd7ZU2f6R/oq3dNYdNLYBd0DAZ4dd42RI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":313022},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.22.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/d05a78b998fb798e86d18fc435e92b17/polygraphso-litmus-0.22.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-8vqrFhtZQ9SfTy28GskFwdOY6gBHYPPbW021pjVLC8rA+vkNvwALZACVkOw2x2V2XEA4IlMNV+UFsbQnNhheJA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.22.0_1782892500105_0.9749931478562306","host":"s3://npm-registry-packages-npm-production"}},"0.22.1":{"name":"@polygraphso/litmus","version":"0.22.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.22.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"a92a87cebd9852081b64bef8582ffc4c6ffc1266","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.22.1.tgz","fileCount":19,"integrity":"sha512-knT+irzqpiQtFa6RYPgbeRWRpQe9ShdvPi5Z1NmVq8QhSHc0W1BsIna+aNuWJ0Iy8p8M7Xgd9Gg6KSWibQO6BA==","signatures":[{"sig":"MEUCIQC9sy3UDjosEqo3OTSG3NoysmngIwOiNwDLJYVNMRlWhQIgWebDgQIV4aLSw/m6mzuhpdlUN8a6sI8+PIJ4CszULwE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":315515},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.22.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/3db8f86be1071cf6aeafa3b3884f6ddb/polygraphso-litmus-0.22.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-knT+irzqpiQtFa6RYPgbeRWRpQe9ShdvPi5Z1NmVq8QhSHc0W1BsIna+aNuWJ0Iy8p8M7Xgd9Gg6KSWibQO6BA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.22.1_1782983386327_0.8388155475270835","host":"s3://npm-registry-packages-npm-production"}},"0.23.0":{"name":"@polygraphso/litmus","version":"0.23.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.23.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"ecd4b053338087a3c8ff917619d8d4105b594c69","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.23.0.tgz","fileCount":19,"integrity":"sha512-5t/RmNbNefXfpzXUrblHmM/O500VZ1NqFSoMRK9w1aX1J3EgknxPsn+ZOA8qa2jpuc0JgmIY25MD4U5pSbm5HA==","signatures":[{"sig":"MEUCIQCOLu555sGP2EUby+Xhndi1GjBR4pYgNCB2QZsODkXVJQIgNhueJN5udg70KxNbL5wIh69x2vIivIamHhuNObAASMY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":321180},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.23.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/93b0e928f2c9354d428839a9ccde4ab3/polygraphso-litmus-0.23.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-5t/RmNbNefXfpzXUrblHmM/O500VZ1NqFSoMRK9w1aX1J3EgknxPsn+ZOA8qa2jpuc0JgmIY25MD4U5pSbm5HA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.23.0_1783002005634_0.8085349396413084","host":"s3://npm-registry-packages-npm-production"}},"0.24.0":{"name":"@polygraphso/litmus","version":"0.24.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.24.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"0922a319cef297ff68767ef2161f8ef78ccc9dee","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.24.0.tgz","fileCount":19,"integrity":"sha512-u0GnFqjyGdLm/XoliLahoOrafLpTob/lD5fExxTlDdU+kGQeqseSmp0Wq6xvKXLefrR84rqiYlayDFXFIOyy7Q==","signatures":[{"sig":"MEYCIQCr+7nLC+3BB6Pm8a/M8W7rY6op9X4CW2dV3n2heMSUGAIhAJXcPYaLwM0wRMSRZIk5Y64sdiXmPWVr2aAiPllsDcg3","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":322187},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.24.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ecb416396832dc5626b92f5a6cc94050/polygraphso-litmus-0.24.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-u0GnFqjyGdLm/XoliLahoOrafLpTob/lD5fExxTlDdU+kGQeqseSmp0Wq6xvKXLefrR84rqiYlayDFXFIOyy7Q==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.24.0_1783031149174_0.20196503428319734","host":"s3://npm-registry-packages-npm-production"}},"0.25.0":{"name":"@polygraphso/litmus","version":"0.25.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.25.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"dd77b0783d77e22f3fdab66363149ea9d0fcb115","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.25.0.tgz","fileCount":20,"integrity":"sha512-FRCSxlw7NY2aLtzNwl4NGSiqCG0+CzTKxYyWmpJDMcKjP3Yn3uGZ3Tj251T1+PNibJr8nX712c03QHta7/iwWA==","signatures":[{"sig":"MEQCIBU7Mk51Ag3M/qLTIILNx0A2YX/P7/4q7kcknslayZMWAiBeoVy1C1XP1Zdp/njNi8xDJ2kA2vrVwzY2W+PkHpMdNw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":341151},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.25.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/e5e972e1deaeead674d9acdefe80a14f/polygraphso-litmus-0.25.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-FRCSxlw7NY2aLtzNwl4NGSiqCG0+CzTKxYyWmpJDMcKjP3Yn3uGZ3Tj251T1+PNibJr8nX712c03QHta7/iwWA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.25.0_1783075660074_0.055893063927882736","host":"s3://npm-registry-packages-npm-production"}},"0.26.0":{"name":"@polygraphso/litmus","version":"0.26.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.26.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"92e29bccd1a3a04e76bde54a56923237569f137b","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.26.0.tgz","fileCount":20,"integrity":"sha512-Asa0F9WxtyD/GtaeQFTnuEkgIZkedl5pl9hT6RX8lll8BGvL055YiSVOqrlKUyZUqQVS1ttFnL41QmCoCpM5Qg==","signatures":[{"sig":"MEQCIBGUiohgvop+ZIe+afchoAQ+FUS1kM3IuMn+vmR6lADHAiAdOOmb8D212tqhmgnNlrPVmv6QUN978d1kUpg5YE7qAw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":342193},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.26.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/82682d11c6da74ea2360b841f2631458/polygraphso-litmus-0.26.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-Asa0F9WxtyD/GtaeQFTnuEkgIZkedl5pl9hT6RX8lll8BGvL055YiSVOqrlKUyZUqQVS1ttFnL41QmCoCpM5Qg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.26.0_1783119994521_0.3764819499897327","host":"s3://npm-registry-packages-npm-production"}},"0.27.0":{"name":"@polygraphso/litmus","version":"0.27.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.27.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"6a41639c0b8257a350e951410beb829462962d2a","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.27.0.tgz","fileCount":20,"integrity":"sha512-PP7MTLXBPFyDPH4Z20EyJHdscLdPjqqSaGm9wZDXrhKWELrDOG4E3wuCM5VaS7mctxLA9FllwXOwoSrvvJJrIg==","signatures":[{"sig":"MEQCIDq62meYkEKLFYOLAODAgSNxxx240GDdfbkqFauk/ZuRAiAOeGgjsex7DWoaSrt4AI+EljtNpTY0guEhuEtLkO8N1w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":343281},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.27.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ae2f98ab51ade01fdf8f17c7dea067d5/polygraphso-litmus-0.27.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-PP7MTLXBPFyDPH4Z20EyJHdscLdPjqqSaGm9wZDXrhKWELrDOG4E3wuCM5VaS7mctxLA9FllwXOwoSrvvJJrIg==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.27.0_1783207037929_0.3693684924392344","host":"s3://npm-registry-packages-npm-production"}},"0.28.0":{"name":"@polygraphso/litmus","version":"0.28.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.28.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"972bb7d48f3f630793aca99c6c0675a0aa6ddd97","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.28.0.tgz","fileCount":20,"integrity":"sha512-ivr+lripyd7d/zN8Tz6mSmQT8e4VPq0Kt8SW52cjoRODwZAoEiNafkqIkpWbCL1AUWQtKIrMGYsw7VVx/LPaMw==","signatures":[{"sig":"MEYCIQCbc1aLEIgYtuS5NpqHDw5Uh14xSAgKj+2XI0Bnnd31lgIhAK4o0Q7rH/Tu5Ce1LyLKgrIWAGtEe+onZlYSCypWPjos","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":352775},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.28.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/71dd92eb8d7e02e1893c5dac400a35e0/polygraphso-litmus-0.28.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-ivr+lripyd7d/zN8Tz6mSmQT8e4VPq0Kt8SW52cjoRODwZAoEiNafkqIkpWbCL1AUWQtKIrMGYsw7VVx/LPaMw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.28.0_1783327631113_0.6170936161678058","host":"s3://npm-registry-packages-npm-production"}},"0.29.0":{"name":"@polygraphso/litmus","version":"0.29.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.29.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"0b06ca80b720d6e10662a257d08ba69d5a3e8a6d","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.29.0.tgz","fileCount":20,"integrity":"sha512-+lbos7j8CJr129+/QFfZD6bGURHhjGqa0lJb31Agq82mPlYMNbohLNfJh1deMcMkDUo250Q8gYG90t+HVgnlZw==","signatures":[{"sig":"MEYCIQDvX5sx5HVFk561H+M52K5ialwNuV7u8WN/m0FgSuZDEAIhANO1j4wo0/LtyCHn0UKD0eKKZ0f11wispvmTPOeYrgya","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":355366},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.29.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/01699688ea87e220318c6f9502d5cc92/polygraphso-litmus-0.29.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-+lbos7j8CJr129+/QFfZD6bGURHhjGqa0lJb31Agq82mPlYMNbohLNfJh1deMcMkDUo250Q8gYG90t+HVgnlZw==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.29.0_1783329003976_0.24995269841046386","host":"s3://npm-registry-packages-npm-production"}},"0.30.0":{"name":"@polygraphso/litmus","version":"0.30.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.30.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"de138083555561f6debce76b6d012da95d8a846d","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.30.0.tgz","fileCount":20,"integrity":"sha512-CyaOnRcWM5BLzD66jDqPtzOdcwKO/EW0h4VQGpBP0Vn71WGu1t14ysFvX5FgGjXA07qnhE7SKAs4u16yj8zI7g==","signatures":[{"sig":"MEUCIQD177zXUp5kbkDAkdq/RcrOS7xXAhfg9uCce7QYmSz+5QIgJfbtczlQHD4CT+99+KOMdXYlcBaS08mWEpIHAxsOeKw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":357087},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.30.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/ab841dfc7160b10867d34c787639f882/polygraphso-litmus-0.30.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-CyaOnRcWM5BLzD66jDqPtzOdcwKO/EW0h4VQGpBP0Vn71WGu1t14ysFvX5FgGjXA07qnhE7SKAs4u16yj8zI7g==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.30.0_1783347847844_0.20352566565811236","host":"s3://npm-registry-packages-npm-production"}},"0.31.0":{"name":"@polygraphso/litmus","version":"0.31.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.31.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"646e2323c7e2541433fd22392bf9d65ce6dc0233","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.31.0.tgz","fileCount":20,"integrity":"sha512-yKskSATAMhQmOexwlQIDm4zePQaIsryifqmH0l5grgG6f437s1PbXd1FpK94P8+E9ztkQpbTyh9u1BJSri6RVQ==","signatures":[{"sig":"MEUCIQDxiGKWSCUbpMeM6ccfTaNkjVEFqfLSdpxLj8FuxnSmugIgZPmhr9C5Xa2CvPD59sgCvdZ3a+9zQ0za5TFjMB5odYA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":368158},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.31.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/3ae9daae5731f2c06bf916c9d3973cf2/polygraphso-litmus-0.31.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-yKskSATAMhQmOexwlQIDm4zePQaIsryifqmH0l5grgG6f437s1PbXd1FpK94P8+E9ztkQpbTyh9u1BJSri6RVQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.31.0_1783509729062_0.4223395322563208","host":"s3://npm-registry-packages-npm-production"}},"0.32.0":{"name":"@polygraphso/litmus","version":"0.32.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.32.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"5576743efc4647b2f170ec349b5e46de0be92730","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.32.0.tgz","fileCount":20,"integrity":"sha512-+aTGlobKhNjAnZq9zxUXlG6dBsC7RJM7jwOS3Nbgp5oOFeGcHlzPszsjJT6IDT4G5sZC3Pu1TMXJhuYAjnpFPA==","signatures":[{"sig":"MEUCIECJuDK6QS5Vz4B53tWx4bpPiBU0VQiJ9YAHbLs9KrxKAiEAssnUwRrL2Osw8YHM6ffnwWeCKwsaR95r8sb8CFzcxws=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":368888},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.32.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/b891eb551faf135852ca8aa3abf4fa5a/polygraphso-litmus-0.32.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-+aTGlobKhNjAnZq9zxUXlG6dBsC7RJM7jwOS3Nbgp5oOFeGcHlzPszsjJT6IDT4G5sZC3Pu1TMXJhuYAjnpFPA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.32.0_1783610532620_0.17788603547098103","host":"s3://npm-registry-packages-npm-production"}},"0.33.0":{"name":"@polygraphso/litmus","version":"0.33.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.33.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"883b39fcf22311f126e0384ad8b1e52d944fd695","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.33.0.tgz","fileCount":20,"integrity":"sha512-jRoCZLAdzv2lg+wNBqfaCgzEx8mVa0SHuhnL1tKBdPdFLB1p2QxR5hQjOdQtOnTnyB2eM8GJ1BGE3QUtFBEV1A==","signatures":[{"sig":"MEUCIGOuXn8jwCkqNS3yX85gsVu9rQ5fxrM35sIxDfrUJjeEAiEA0/IBh3aZ3Ttxq7NZFPCShOcXdVOlKCZ0vkAmjx5CVhg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":397173},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.33.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/8d357cdcff7a1c2f4ce7e955a6aaf961/polygraphso-litmus-0.33.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-jRoCZLAdzv2lg+wNBqfaCgzEx8mVa0SHuhnL1tKBdPdFLB1p2QxR5hQjOdQtOnTnyB2eM8GJ1BGE3QUtFBEV1A==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.33.0_1783629202177_0.11991151950392953","host":"s3://npm-registry-packages-npm-production"}},"0.33.1":{"name":"@polygraphso/litmus","version":"0.33.1","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.33.1","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"3b2d20e9a94facdf90623af34fd57e0916b77f63","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.33.1.tgz","fileCount":20,"integrity":"sha512-UPPvZGmUUCjsT1rcBwDTJM2moTOG3g/yZ96rr3nVY0mRco3tizUNOM1TytzGXCwtAkZFR7iYk/nwGyS8q0ywTA==","signatures":[{"sig":"MEUCIEMBllEBWr/m9o7HpzT9EO/jJ52cFr/VANriyEa/djQQAiEAnD1C+OK4Rr10V8GoOgu/Li3BMtwTeB/h9cnx+0zQpEA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":397405},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.33.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/8b6be065fcdd253a9c5a52bbf50c77d5/polygraphso-litmus-0.33.1.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-UPPvZGmUUCjsT1rcBwDTJM2moTOG3g/yZ96rr3nVY0mRco3tizUNOM1TytzGXCwtAkZFR7iYk/nwGyS8q0ywTA==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.33.1_1783674684070_0.44101778267094427","host":"s3://npm-registry-packages-npm-production"}},"0.34.0":{"name":"@polygraphso/litmus","version":"0.34.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.34.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"0e5ec418a4957292c67537594c5d4b14625991e1","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.34.0.tgz","fileCount":20,"integrity":"sha512-iq992W0JGbzalNVw82p5kEOF/yqCWmIwENJdU4GdkObNYIdvBrf3L9QfRsviBjuSVV8WCap3h6FhU7bRi4oA+g==","signatures":[{"sig":"MEUCIQCdfcMboYRrgb0ID3wHaNHHsIQ1vulYyU1Mu2M3TNy5jwIgCRY83tnWgOfMPSyo3dDX0zVID0Z9Kol9iwzgxL+/n2A=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":398805},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.34.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/c65f6eee6adfd6e2eb089a115382a08d/polygraphso-litmus-0.34.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-iq992W0JGbzalNVw82p5kEOF/yqCWmIwENJdU4GdkObNYIdvBrf3L9QfRsviBjuSVV8WCap3h6FhU7bRi4oA+g==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.34.0_1784196460330_0.9461177192389538","host":"s3://npm-registry-packages-npm-production"}},"0.35.0":{"name":"@polygraphso/litmus","version":"0.35.0","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"license":"Apache-2.0","_id":"@polygraphso/litmus@0.35.0","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"homepage":"https://polygraph.so","bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-mcp":"dist/mcp.js","polygraphso-litmus-skill":"dist/cli-skill.js"},"dist":{"shasum":"84e7541ae932b8e0e4643cbdbf8e16c54637ee38","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.35.0.tgz","fileCount":20,"integrity":"sha512-Loto1/57SqI1uDD0dwrLQfdufQd9YwcKfydOK2mkefd6rL8gBhhtFj55NCIH44xUaEMeaUUkEfPvQOCqyiQXqQ==","signatures":[{"sig":"MEQCIDlXZoiekhOtnnlAKIZEGY5lomZrCb2n6CptpF7j5iDTAiByI2BT8oDLdm9WOjpp1C4a4Py5dmeNyBCyYruiSylLCQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":398639},"main":"./dist/index.js","type":"module","_from":"file:polygraphso-litmus-0.35.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"mcpName":"io.github.polygraphso/litmus","scripts":{"test":"vitest run --passWithNoTests","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"_resolved":"/tmp/edd58e584308b343c4414c23302ec74e/polygraphso-litmus-0.35.0.tgz","polygraph":{"egress":["polygraph.so"]},"_integrity":"sha512-Loto1/57SqI1uDD0dwrLQfdufQd9YwcKfydOK2mkefd6rL8gBhhtFj55NCIH44xUaEMeaUUkEfPvQOCqyiQXqQ==","repository":{"url":"git+https://github.com/polygraphso/litmus.git","type":"git","directory":"packages/litmus"},"_npmVersion":"10.8.2","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","directories":{},"_nodeVersion":"20.20.2","dependencies":{"tsx":"^4.19.0","zod":"^3.23.8","ethers":"^6.16.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.0","vitest":"^3.2.6","typescript":"^5.9.3","@types/node":"^20.16.0","@polygraph/cli":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/core":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/onchain":"0.0.0"},"_npmOperationalInternal":{"tmp":"tmp/litmus_0.35.0_1784417611841_0.8285763652403362","host":"s3://npm-registry-packages-npm-production"}},"0.36.0":{"name":"@polygraphso/litmus","version":"0.36.0","mcpName":"io.github.polygraphso/litmus","description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","license":"Apache-2.0","homepage":"https://polygraph.so","polygraph":{"egress":["polygraph.so"]},"repository":{"type":"git","url":"git+https://github.com/polygraphso/litmus.git","directory":"packages/litmus"},"bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"type":"module","main":"./dist/index.js","module":"./dist/index.js","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"}},"bin":{"polygraphso-litmus":"dist/cli.js","polygraphso-litmus-skill":"dist/cli-skill.js","polygraphso-litmus-mcp":"dist/mcp.js"},"engines":{"node":">=18"},"dependencies":{"@modelcontextprotocol/sdk":"^1.29.0","ethers":"^6.16.0","zod":"^3.23.8","tsx":"^4.19.0"},"devDependencies":{"@types/node":"^20.16.0","tsup":"^8.3.0","typescript":"^5.9.3","vitest":"^3.2.6","@polygraph/core":"0.0.0","@polygraph/onchain":"0.0.0","@polygraph/agent":"0.0.0","@polygraph/probes":"0.0.0","@polygraph/mcp":"0.0.0","@polygraph/cli":"0.0.0"},"publishConfig":{"access":"public"},"scripts":{"build":"tsup","typecheck":"tsc --noEmit","test":"vitest run --passWithNoTests"},"_id":"@polygraphso/litmus@0.36.0","_integrity":"sha512-+Rnb4wTCx59vkmly4AHzqFJu+3X9CCdnIJtcH0jxXaOYtWtxMQEPVzOPvVZVWVEPEBANhxV5FzFKZpwU0hTE+g==","_resolved":"/tmp/558eb87ee0496d17d9816ce688049112/polygraphso-litmus-0.36.0.tgz","_from":"file:polygraphso-litmus-0.36.0.tgz","_nodeVersion":"20.20.2","_npmVersion":"10.8.2","dist":{"integrity":"sha512-+Rnb4wTCx59vkmly4AHzqFJu+3X9CCdnIJtcH0jxXaOYtWtxMQEPVzOPvVZVWVEPEBANhxV5FzFKZpwU0hTE+g==","shasum":"1df8c13380852f7784ab488990c44b9fe2bb5a92","tarball":"https://registry.npmjs.org/@polygraphso/litmus/-/litmus-0.36.0.tgz","fileCount":19,"unpackedSize":408582,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIA6wDBWulBg23HDwU+DkiazzmCPCh5E6leOU0GhcD8bjAiEAwD5EPNTpk8RlsdDCyb3fN5o9XDWSipGjm20D3JJ7zog="}]},"_npmUser":{"name":"franciscomleal","email":"francisco@talentprotocol.com"},"directories":{},"maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/litmus_0.36.0_1784562696413_0.8795689714332062"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-16T11:16:38.998Z","modified":"2026-07-20T15:51:36.887Z","0.2.0":"2026-06-16T11:16:39.321Z","0.2.1":"2026-06-16T11:35:23.042Z","0.3.0":"2026-06-16T15:36:49.641Z","0.4.0":"2026-06-16T17:47:17.630Z","0.4.1":"2026-06-16T18:16:46.885Z","0.5.0":"2026-06-17T10:14:20.311Z","0.6.0":"2026-06-17T11:28:26.012Z","0.7.0":"2026-06-17T14:29:42.844Z","0.8.0":"2026-06-17T14:45:37.418Z","0.8.1":"2026-06-17T17:24:22.634Z","0.9.0":"2026-06-17T20:18:08.440Z","0.9.1":"2026-06-17T22:42:15.161Z","0.10.0":"2026-06-18T10:08:18.417Z","0.11.0":"2026-06-18T12:55:18.401Z","0.12.0":"2026-06-18T14:42:11.078Z","0.12.1":"2026-06-19T13:06:11.077Z","0.13.0":"2026-06-23T10:36:59.950Z","0.14.0":"2026-06-24T10:21:38.484Z","0.15.0":"2026-06-24T10:34:14.087Z","0.16.0":"2026-06-24T15:16:25.520Z","0.16.1":"2026-06-24T19:25:58.309Z","0.17.0":"2026-06-24T23:40:52.206Z","0.17.1":"2026-06-25T13:02:20.994Z","0.18.0":"2026-06-25T14:22:13.965Z","0.18.1":"2026-06-25T15:22:55.927Z","0.18.2":"2026-06-25T22:50:14.271Z","0.19.0":"2026-06-25T23:30:32.276Z","0.19.1":"2026-06-26T07:52:36.051Z","0.20.0":"2026-06-29T15:17:44.520Z","0.21.0":"2026-06-30T12:04:52.879Z","0.21.1":"2026-06-30T13:37:47.082Z","0.22.0":"2026-07-01T07:55:00.254Z","0.22.1":"2026-07-02T09:09:46.457Z","0.23.0":"2026-07-02T14:20:05.776Z","0.24.0":"2026-07-02T22:25:49.328Z","0.25.0":"2026-07-03T10:47:40.219Z","0.26.0":"2026-07-03T23:06:34.661Z","0.27.0":"2026-07-04T23:17:18.067Z","0.28.0":"2026-07-06T08:47:11.256Z","0.29.0":"2026-07-06T09:10:04.152Z","0.30.0":"2026-07-06T14:24:07.979Z","0.31.0":"2026-07-08T11:22:09.243Z","0.32.0":"2026-07-09T15:22:12.761Z","0.33.0":"2026-07-09T20:33:22.371Z","0.33.1":"2026-07-10T09:11:24.212Z","0.34.0":"2026-07-16T10:07:40.453Z","0.35.0":"2026-07-18T23:33:31.999Z","0.36.0":"2026-07-20T15:51:36.676Z"},"bugs":{"url":"https://github.com/polygraphso/litmus/issues"},"license":"Apache-2.0","homepage":"https://polygraph.so","keywords":["polygraph","mcp","model-context-protocol","trust","ai-agents","security","litmus"],"repository":{"type":"git","url":"git+https://github.com/polygraphso/litmus.git","directory":"packages/litmus"},"description":"Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.","maintainers":[{"name":"franciscomleal","email":"francisco@talentprotocol.com"}],"readme":"# @polygraphso/litmus\n\n[![polygraph](https://polygraph.so/api/badge?server=npm/@polygraphso/litmus)](https://polygraph.so/mcp/npm/@polygraphso/litmus)\n\nThe behavioral **litmus** harness for MCP servers, from [polygraph.so](https://polygraph.so).\n\nIt connects to an MCP server the way an agent would, fingerprints its exact tool\nsurface, and runs four probe categories — **C-01** tool-output injection (static,\ndynamic, and second-order — one tool's output weaponized as another's input),\n**C-02** permission/egress (in a hardened default-deny Docker sandbox, matched host\n**and** port), **C-03** sensitive-data handling (planted canaries), **C-04**\nadversarial-input handling (malformed/oversized and jailbreak inputs) — then grades\nthe server **A–F** and produces a deterministic, content-addressed evidence bundle.\n\nA passing grade is a measurement, not a guarantee. The methodology and its\ndisclosed limits live at [polygraph.so](https://polygraph.so).\n\n## Install\n\n```bash\nnpm i -g @polygraphso/litmus\n# …or run without installing (note the -p flag — the package ships two bins,\n# `polygraphso-litmus` and `polygraphso-litmus-mcp`, so npx needs to be told which):\nnpx -y -p @polygraphso/litmus polygraphso-litmus litmus npm/@modelcontextprotocol/server-filesystem\n```\n\nRequires Node ≥ 18. **Docker is optional** — without it, C-02 (egress) is skipped\nand the grade is capped at **B** for that run.\n\n### Gate your CI (GitHub Action)\n\nFail a build when an MCP **server** — or an Agent **Skill** it ships — grades **D/F**.\nThe [**polygraph MCP gate**](https://github.com/marketplace/actions/polygraph-mcp-gate)\non the GitHub Marketplace wraps the harness as `polygraphso/litmus@v1`:\n\n```yaml\n# .github/workflows/mcp-gate.yml\nname: mcp-gate\non: [pull_request]\npermissions:\n  contents: read\njobs:\n  gate:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v5\n      - uses: polygraphso/litmus@v1\n        with:\n          # Auto-discovers MCP servers (.mcp.json / .vscode/mcp.json / .cursor/mcp.json)\n          # and skills (SKILL.md dirs). Or name them explicitly:\n          servers: |\n            npm/@modelcontextprotocol/server-filesystem\n          # min-grade: B      # stricter than the default D/F gate\n          # strict: \"true\"    # also fail on targets that cannot be graded\n```\n\nInputs: `servers` · `skills` · `discover` (default `true`) · `min-grade` · `strict` ·\n`working-directory` · `version` · `bearer`. Outputs: `result` · `failed` · `report`.\nNot on GitHub? The gate is a plain command —\n`npx -y -p @polygraphso/litmus polygraphso-litmus ci` — so it runs in any CI or as a\npre-commit hook.\n\n## CLI\n\n```bash\npolygraphso-litmus litmus <registry-ref | https-url | path-to-mcp>   # grade a server\npolygraphso-litmus litmus --json <ref>                              # machine-readable evidence bundle\npolygraphso-litmus litmus --timeout <seconds> <ref>                 # cap the whole run (default 900s)\npolygraphso-litmus litmus --no-deps-audit <ref>                     # skip the dependency advisory scan\npolygraphso-litmus check <ref>                                      # look up a published grade\n```\n\nExamples:\n\n```bash\n# a remote https target runs no local code — graded directly\npolygraphso-litmus litmus https://example.com/mcp\n\n# a registry ref or local file launches the TARGET's own code. Grade it sandboxed:\nLITMUS_STDIO_ISOLATION=docker polygraphso-litmus litmus npm/@modelcontextprotocol/server-filesystem\n# …or, without Docker, opt in to running it on this host:\npolygraphso-litmus litmus --unsafe-host-exec npm/@modelcontextprotocol/server-filesystem\n```\n\n**Host-execution safety.** Grading a registry ref (`npm/…`, `pypi/…`) or a local\npath **launches the target's own code**. By default the CLI refuses to do that on\nyour host: set `LITMUS_STDIO_ISOLATION=docker` to run the target only inside the\nhardened sandbox, or pass `--unsafe-host-exec` to accept host execution. Remote\n`https://` targets run no local code and need neither.\n\n**Dependency advisories.** Below the grade, an `npm/…` target's dependency tree is\nchecked against the [osv.dev](https://osv.dev) vulnerability database and any\nvulnerable dependencies are listed. This is **advisory only and point-in-time**: it\nnever affects the A–F grade and is not part of the evidence bundle (vulnerability\ndata changes over time, so it stays out of the reproducible verdict). Other target\nkinds report it as skipped. The scan resolves the tree with\n`npm install --package-lock-only --ignore-scripts` — no tarballs are downloaded and\nno package code runs. Opt out with `--no-deps-audit` or `LITMUS_DEPS_AUDIT=0`. From\nthe `run_litmus` MCP tool it is returned as a separate `dependencyAudit` field.\n\n**Token-gated servers.** If a target is a token-gated `https://` server and you pass no\n`--bearer` / `--header` / `LITMUS_BEARER`, litmus — on the auth failure — looks for a token you\nalready configured for that server (matched by URL in your MCP client config: project\n`.mcp.json` / `.cursor/mcp.json` / `.vscode/mcp.json`, or your Claude Code / Claude Desktop /\nCursor config) and offers to reuse it. It is read-only, asks before sending, sends only to the\ntarget origin, and never prints the token. In non-interactive use, pass `--use-discovered-auth`\nto opt in without a prompt.\n\nIf the server uses **OAuth** (no static token to reuse), litmus opens your browser to authorize,\ncaptures the token via a single-use `127.0.0.1` callback, and grades with it — used for that run\nonly, never stored. This happens automatically on an interactive terminal; use `--oauth` /\n`--no-oauth` to force or skip it. From the `run_litmus` MCP tool, set `interactive_auth: true`.\n\nThe `litmus` command exits non-zero on a failing grade (D/F), so it scripts in CI.\n\nTo dispute a published grade, just re-run `litmus` against the same server: the harness is\nopen and deterministic, so a re-run reproduces the grade — or refutes it.\n\n## Use it from an AI agent (MCP server)\n\nFor grade lookups, point any MCP client at polygraph's hosted endpoint, no install:\n\n```bash\nclaude mcp add --transport http polygraph https://polygraph.so/api/mcp\n```\n\nor the raw config:\n\n```json\n{ \"mcpServers\": { \"polygraph\": { \"url\": \"https://polygraph.so/api/mcp\" } } }\n```\n\nThis serves the lookup tools only (`check_server`, `list_servers`, `request_grade`); grading a\nserver yourself (`run_litmus`, `run_skill_litmus`) executes its code, so it needs the local\nstdio install below.\n\nThe package also ships a stdio MCP server, `polygraphso-litmus-mcp`, with the full toolset, so\nit works in any MCP-capable client. For MCP servers it exposes:\n\n- **`check_server`** — read a server's *published* grade from polygraph.so in under\n  a second (no execution). The default first move before recommending or installing\n  a server. On a miss it says what to do next: `request_grade` or `run_litmus`.\n- **`list_servers`** — servers with a published grade, A first; paged (default 25 per call, with `grade`/`limit`/`offset` filters and a full-corpus summary).\n- **`request_grade`** — record a grade request with polygraph.so. Recording is\n  free; grading starts once the request's $1 one-time fee is paid (the response\n  carries the payment link — web checkout in $POLYGRAPH, or x402/USDC for agents)\n  and the grade publishes within 48h of payment. Read the result later with\n  `check_server`. No contact details — the request records the calling client's\n  self-reported name/version.\n- **`run_litmus`** — actively grade a server *now* (runs the harness end-to-end)\n  and return the grade and the evidence. Optional **`bearer`** (and `header`\n  entries, each `\"Key: Value\"`) grade a token-gated `https://` MCP target — sent\n  to that origin only, ignored for stdio/local targets, the same plumbing as the\n  CLI's `--bearer` / `--header`. Grading a registry ref or local path launches the\n  target's own code, so it requires **`unsafe_host_exec: true`** unless\n  `LITMUS_STDIO_ISOLATION=docker` is set (the MCP mirror of `--unsafe-host-exec`).\n- **`verify_attestation`** — read the *onchain proof* behind a published grade\n  (EAS on Base) before trusting or paying a server.\n\nThe lookup tools (`check_server`, `list_servers`, `request_grade`) read\npolygraph.so's hosted grade index; `run_litmus` and `verify_attestation` need no\npolygraph service at all — the harness and the chain are enough. (The lookups\npreviously shipped as a separate `@polygraphso/mcp` package, now deprecated.)\n\nIt also registers two **prompts** that show up as slash commands — in Claude Code,\n`/mcp__polygraph-litmus__grade <server_ref>` (run a fresh grade) and\n`/mcp__polygraph-litmus__check <server_ref>` (read a published grade); other\nclients surface the same prompts in their own UI. For a cleaner pair of commands\nin Claude Code — `/polygraph:grade` and `/polygraph:check` — install the plugin\n(below), which wires up this server and both commands in one step.\n\n**Prerequisites:** Node ≥ 18. Docker is optional (without it, C-02 egress is\nskipped and the grade caps at B). The lookup tools and `verify_attestation` talk\nto `https://polygraph.so` by default; `POLYGRAPH_API_URL` overrides the base\n(https required; plain http only for localhost).\n\n> **Heads-up:** *onchain attestation* publishing is still rolling out, so\n> `verify_attestation` commonly returns `not_available` even for servers\n> `check_server` shows as graded — that means *no onchain proof yet*, not a\n> failing grade. To grade a server right now, use `run_litmus`.\n\n### Claude Code: one-click plugin (recommended)\n\nThe plugin bundles this MCP server **and** adds the `/polygraph:grade` and\n`/polygraph:check` commands — one install does everything:\n\n```\n/plugin marketplace add polygraphso/litmus\n/plugin install polygraph@polygraphso\n```\n\nThen just run `/polygraph:grade npm/@modelcontextprotocol/server-filesystem`.\n\nPrefer to wire the server up by hand, or using another client? Add it once, then\njust talk to your agent.\n\n**Claude Code** — one command:\n\n```bash\nclaude mcp add polygraph-litmus -e POLYGRAPH_API_URL=https://polygraph.so \\\n  -- npx -y -p @polygraphso/litmus polygraphso-litmus-mcp\n```\n\n**Cursor** — one-click install:\n\n[![Add polygraph-litmus to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](cursor://anysphere.cursor-deeplink/mcp/install?name=polygraph-litmus&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIi1wIiwiQHBvbHlncmFwaHNvL2xpdG11cyIsInBvbHlncmFwaHNvLWxpdG11cy1tY3AiXSwiZW52Ijp7IlBPTFlHUkFQSF9BUElfVVJMIjoiaHR0cHM6Ly9wb2x5Z3JhcGguc28ifX0=)\n\nOr wire it up by hand — **Claude Desktop** (`claude_desktop_config.json`) / **Cursor** (`~/.cursor/mcp.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"polygraph-litmus\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"-p\", \"@polygraphso/litmus\", \"polygraphso-litmus-mcp\"],\n      \"env\": { \"POLYGRAPH_API_URL\": \"https://polygraph.so\" }\n    }\n  }\n}\n```\n\n> The `-p` flag is required: this package ships two bins, so plain `npx @polygraphso/litmus` can't tell which to run. If you installed globally (`npm i -g @polygraphso/litmus`) you can instead use `\"command\": \"polygraphso-litmus-mcp\"` with no args.\n\n**Any other MCP client / the Claude Agent SDK:** spawn the same stdio command —\n`npx -y -p @polygraphso/litmus polygraphso-litmus-mcp`.\n\n### Then just ask your agent\n\n> Run polygraph against `npm/@modelcontextprotocol/server-filesystem` and tell me the grade.\n\nThe agent calls **`run_litmus`**, which launches that server in the harness, runs\nC-01/C-02/C-03/C-04, and returns the **grade (A–F)**, the per-category results, and the\ntool-surface fingerprint. Use **`verify_attestation`** instead to read a grade\nthat's already published.\n\n`run_litmus` launches the target server's code to exercise it (egress-sandboxed\nwhen Docker is present). It needs no wallet or RPC.\n\n### ChatGPT and other remote clients\n\nChatGPT's MCP support expects a remote **Streamable-HTTP** server. For grade lookups, point\nit at polygraph's hosted endpoint (`https://polygraph.so/api/mcp`), no install needed.\n\nThe npm package itself remains **stdio-only** and exposes the full toolset, including\n`run_litmus` and `run_skill_litmus`. To reach that over a remote transport instead, self-host\na bridge, e.g.\n\n```bash\nnpx -y supergateway --stdio \"npx -y -p @polygraphso/litmus polygraphso-litmus-mcp\" --port 8000\n```\n\n(or [`mcp-proxy`](https://github.com/sparfenyuk/mcp-proxy)) — then point your client\nat that endpoint. polygraph does not host this for you; the bridge runs on your own\nmachine.\n\n### Troubleshooting\n\n- **Two bins / `npx`:** `npx` needs `-p @polygraphso/litmus` *plus* the bin name\n  (`polygraphso-litmus` or `polygraphso-litmus-mcp`); plain `npx @polygraphso/litmus`\n  can't choose which to run. Installed globally? Use the bin name directly, no `-p`.\n- **Docker optional:** without Docker, C-02 (egress) is skipped and the grade caps\n  at **B** — the C-02 row reads `skipped` with reason `no sandbox (Docker\n  unavailable)`. Not a failure, just unverified.\n- **`verify_attestation` says `lookup_failed`:** the grade index or RPC was\n  unreachable — that's *unknown*, not *no grade*. Retry; check `POLYGRAPH_API_URL`.\n\n## Grade a skill\n\nClaude Code / Agent **Skills** (a `SKILL.md` plus an optional bundle) are graded by a\nseparate static litmus (`litmus-skill-v3`). It scans the skill's bytes — **S-01**\nprompt injection in the body, **S-03** data-exfiltration instructions, **S-04**\ndangerous commands in the SKILL.md body or bundled executable scripts (including\nbase64-obfuscated `curl | bash`) — and content-hashes the whole directory. The letter\nis **A/B/D/F**.\n\nThis is a **static** scan: it does not execute the skill or its scripts, so an `A`\nmeans the static checks were clean, not that the skill is behaviorally safe. A\ncommand the skill builds or fetches at runtime is not visible to it.\n\n### CLI\n\n```bash\npolygraphso-litmus-skill <path-to-skill-dir>          # grade a local skill folder (must contain SKILL.md)\npolygraphso-litmus-skill --json <path-to-skill-dir>   # machine-readable safety + quality bundles\n```\n\nIt also prints a separate, advisory **quality** signal (`well-formed` / `issues` /\n`malformed`) — never an A–F letter, never minted. Its deterministic checks\n(frontmatter + bundled-link resolution) always run; the optional LLM-judged axes\n(honesty, coherence) run only when a judge is available:\n\n- **Inside an agent** (the MCP tool below): the host agent's own model judges via MCP\n  sampling — no key, any provider.\n- **Standalone:** bring your own key for any OpenAI-compatible endpoint:\n\n  ```bash\n  export LITMUS_LLM_API_KEY=…                            # your key (any OpenAI-compatible endpoint)\n  export LITMUS_LLM_MODEL=gpt-4o                         # a model the endpoint serves\n  export LITMUS_LLM_BASE_URL=https://api.openai.com/v1   # optional; defaults to OpenAI\n  # Other providers via their OpenAI-compatible endpoint, e.g.:\n  #   Claude:  LITMUS_LLM_BASE_URL=https://api.anthropic.com/v1                       LITMUS_LLM_MODEL=claude-sonnet-4-6\n  #   Gemini:  LITMUS_LLM_BASE_URL=https://generativelanguage.googleapis.com/v1beta/openai  LITMUS_LLM_MODEL=gemini-2.5-flash\n  ```\n\n- With neither, the judged axes are skipped — the grade and deterministic quality\n  still run. The core never needs a key.\n\n### From an AI agent (MCP)\n\nThe same `polygraphso-litmus-mcp` server exposes two skill tools (plus `grade-skill` /\n`check-skill` prompts):\n\n- **`run_skill_litmus`** — grade a skill now (static; uses the host model via\n  sampling for the quality axes, no key). Takes a local skill directory or a\n  public GitHub skill — a github.com URL to the skill folder or its SKILL.md, or\n  `github/<owner>/<repo>#<path>` — downloaded over TLS and scanned locally.\n- **`verify_skill_attestation`** — read a skill's *already-published* grade by its\n  `skill_ref` (`source/owner/repo#path`, e.g. `github/anthropics/skills#skills/pdf`). It\n  returns the attested `contentHash`; recompute the skill's hash and require equality\n  before installing — the content hash, not the version, is the trust anchor.\n\n## Library\n\n```ts\nimport { runLitmus, gateDecision, liveFingerprint, readAttestation } from \"@polygraphso/litmus\";\n\nconst bundle = await runLitmus(\"npm/@modelcontextprotocol/server-filesystem\");\nconsole.log(bundle.grade, bundle.gradeRationale);\n\n// Skills: static safety grade + a separate advisory quality bundle.\nimport { runSkillLitmus, runSkillQuality } from \"@polygraphso/litmus\";\n\nconst skill = runSkillLitmus(\"./skills/my-skill\");\nconsole.log(skill.grade, skill.contentHash);\n```\n\n## License\n\nApache-2.0\n","readmeFilename":"README.md"}