Bulletin No.297 · Oct 24, 2026Public data only · heuristic, not an audit
MCP/Watch Weekly digest
Latest advisories
2026-10-08HIGHGHSA-cv3g-hj65-pcfh — PraisonAI2026-10-08CRITICALGHSA-9mp3-24cc-77mg — PraisonAI2026-10-08HIGHGHSA-hc5v-gxvj-58wh — PraisonAI2026-10-08HIGHGHSA-5r6c-gj4g-r697 — PraisonAI2026-10-08HIGHGHSA-4w49-gwv8-fpjg — PraisonAI2026-10-08MODERATEGHSA-4r3p-w3mc-5v34 — PraisonAI2026-10-08HIGHGHSA-79fv-7hq9-w7xg — PraisonAI2026-10-08HIGHGHSA-2gpf-2492-q9jh — PraisonAI2026-10-08MODERATEGHSA-q7m5-3jmv-vm48 — PraisonAI2026-10-08MODERATEGHSA-xpx6-x8c2-mw5w — PraisonAI2026-10-08MODERATEGHSA-wf65-4jjx-q444 — PraisonAI2026-10-07HIGHGHSA-fj8f-m44g-c479 — PraisonAI
← Case index
Case file No.232 · pypi · stdio

PyEuropePMC

io.github.JonasHeinickeBio/pyeuropepmc · v4.2.0

Europe PMC search, search analytics, full text, enrichment, PICO, MeSH, data links, export

Security score
93/100
Strong

Normalized over 100 points of available evidence.

Score breakdown

Known advisories40/40

0 affecting current version, 0 historical

Maintenance20/20

last push 2 days ago

Source transparency15/15

public repo, license MIT

Metadata stability15/15

0 risky metadata change(s) without a version bump

Adoption3/10

189 weekly downloads

Known advisories

source: OSV.dev
No advisories found in OSV for this package name. (Not proof of safety.)

Metadata change timeline

rug-pull detection
  1. v3.0.0 → v4.2.0Oct 24, 2026
    • version changed version bump
      "3.0.0" → "4.2.0"
    • description changed description text edit
      "Search and analyse scientific literature across Europe PMC, PubMed, arXiv, and ClinicalTrials.gov" → "Europe PMC search, search analytics, full text, enrichment, PICO, MeSH, data links, export"
    • packages.0.version changed package version bump
      "3.0.0" → "4.2.0"
    • packages.0.environmentVariables.0 added env var added PYEUROPEPMC_MCP_LOG_LEVEL (optional/non-secret)
      null → {"name":"PYEUROPEPMC_MCP_LOG_LEVEL","description":"Log level, written to stderr: DEBUG, INFO, WARNING or ERROR.","isSecret":false,"isRequired":false}
    • packages.0.environmentVariables.1 added env var added SEMANTIC_SCHOLAR_API_KEY (optional/non-secret)
      null → {"name":"SEMANTIC_SCHOLAR_API_KEY","description":"Optional. Raises the Semantic Scholar rate limit used by citation_snowball and the semantic_scholar source of unified_search; without it requests are throttled and may get HTTP 429.","isSecret":true,"isRequired":false}
    • packages.0.environmentVariables.2 added env var added OPENAI_API_KEY (optional/non-secret)
      null → {"name":"OPENAI_API_KEY","description":"Optional. Enables the LLM-powered tools (analyze_citations, literature_review, paper_screening, ...) with any OpenAI-compatible API. Needs the agentic extra.","isSecret":true,"isRequired":false}
    • packages.0.environmentVariables.3 added env var added OPENAI_BASE_URL (optional/non-secret)
      null → {"name":"OPENAI_BASE_URL","description":"Optional. Base URL of an OpenAI-compatible API for the LLM tools.","isSecret":false,"isRequired":false}
    • packages.0.environmentVariables.4 added env var added OPENAI_MODEL (optional/non-secret)
      null → {"name":"OPENAI_MODEL","description":"Optional. Model for the LLM tools.","isSecret":false,"isRequired":false}
    • packages.0.environmentVariables.5 added env var added UNPAYWALL_EMAIL (optional/non-secret)
      null → {"name":"UNPAYWALL_EMAIL","description":"Optional. Your contact e-mail address, sent with each Unpaywall request (their terms ask for one). Needed by the find_open_access tool only; there is no default.","isSecret":false,"isRequired":false}
  2. First snapshot (v3.0.0)Oct 17, 2026

Tool lists: not published by the registry — unknown.

FAQ

auto-generated from the data above
Is PyEuropePMC safe?

MCPWatch gives PyEuropePMC a heuristic security score of 93/100 (strong), based on 100 points of available evidence. This is an automated heuristic, not an audit.

Does PyEuropePMC have known CVEs or vulnerabilities?

No advisories were found in OSV.dev for the pypi package pyeuropepmc. That is not proof of safety.

When was PyEuropePMC last updated?

The latest registry version is 4.2.0, published Oct 22, 2026. The last push to JonasHeinickeBio/pyEuropePMC was on Oct 22, 2026. MCPWatch last checked it on Oct 24, 2026.

What license does PyEuropePMC use?

GitHub reports the license of JonasHeinickeBio/pyEuropePMC as MIT.

Related servers

same publisher / similar score