Case file No.120 · pypi · stdio

Snappfood & SnappMarket

io.github.sepehr071/snapp-mcp · v0.3.0

Unofficial read-only Snappfood & SnappMarket: search food and groceries, compare prices, deals.

Package ↗GitHub ↗Website ↗

Security score

93/100

Strong

Normalized over 100 points of available evidence.

Score breakdown

Known advisories40/40

0 affecting current version, 0 historical

Maintenance20/20

last push 2 days ago

Source transparency15/15

public repo, license MIT

Metadata stability15/15

0 risky metadata change(s) without a version bump

Adoption3/10

933 weekly downloads

Known advisories

source: OSV.dev

No advisories found in OSV for this package name. (Not proof of safety.)

Metadata change timeline

rug-pull detection

v0.2.0 → v0.3.0Oct 19, 2026

version changed version bump
```
"0.2.0" → "0.3.0"
```
packages.0.version changed package version bump
```
"0.2.0" → "0.3.0"
```

packages.0.environmentVariables.0.description changed env var description edit

"Optional HTTP proxy URL. Snappfood only accepts Iranian IP addresses; system proxy settings are ignored." → "Optional HTTP proxy URL. Snappfood only accepts Iranian IP addresses; system proxy settings are ignored. Also accepts a comma-separated list: one is used until it gets blocked or fails to connect, then the next."

First snapshot (v0.2.0)Oct 17, 2026

Tool lists: not published by the registry — unknown.

FAQ

auto-generated from the data above

Is Snappfood & SnappMarket safe?

MCPWatch gives Snappfood & SnappMarket a heuristic security score of 93/100 (strong), based on 100 points of available evidence. This is an automated heuristic, not an audit.

Does Snappfood & SnappMarket have known CVEs or vulnerabilities?

No advisories were found in OSV.dev for the pypi package snapp-mcp. That is not proof of safety.

When was Snappfood & SnappMarket last updated?

The latest registry version is 0.3.0, published Oct 18, 2026. The last push to sepehr071/snapp-mcp was on Oct 18, 2026. MCPWatch last checked it on Oct 20, 2026.

What license does Snappfood & SnappMarket use?

GitHub reports the license of sepehr071/snapp-mcp as MIT.

Related servers

same publisher / similar score