Pinning MCP server versions
Why it matters
npx some-mcp-server@latest runs whatever was published last, with the access your agent has.
How to fix it
Does your repository pass this check?
Free for public GitHub repositories, no account needed. 50+ DevOps and security checks in about ten seconds.