MCP-customs – NPM audit, but for MCP servers (offline, zero telemetry)

Built this after noticing nobody checks what an MCP server actually does before connecting it to an agent. Scanned 12 popular MCP servers before launch — the more interesting result was catching bugs in my own scanner (it flagged a commented-out eval() as critical in notion-mcp-server). Full writeup: https://dev.to/mcpcustoms/we-scanned-12-popular-mcp-servers-...