AGENTSCORE-2026-0073
MCP package: @meta-quest/hzdb
Published 6/30/2026 · 1.2.1 → 1.3.1
@meta-quest/hzdb updated from 1.2.1 to 1.3.1. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.
90 → 75
Score
LOW → MODERATE
Risk
WARN
Verdict
Findings
- high install_script: Package has 'postinstall' script: node -e "require('@meta-quest/metavr/postinstall.js')"
- low no_provenance: Package is not published with provenance attestations or trusted publishing. Published by: zbowling