create-starter
io.github.starter-series/create-starter
About create-starter
create-starter is an MCP server published by the GitHub account starter-series. Scaffold Starter Series projects and check release, deployment, security, and agent instructions.
It runs on your own machine: your AI client starts it from the npm package starter-series at version 0.5.3.
It asks for no keys or passwords.
Version 0.5.3 was published on 11 September 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 9 automated checks on the registry entry and the package code: 7 pass, 0 warn, 0 fail, 2 info. How we check.
What it asks for
This server declares no environment variables, so it asks for no keys or settings.
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/starter-series/create-starter |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for no secrets |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account starter-series |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Install scripts | Pass | starter-series@0.5.3 runs nothing at install |
| Code red flags | Pass | Read 66 files in starter-series@0.5.3: no obfuscation, encoded execution, credential reads or data-collection endpoints found |
| Text aimed at the AI | Pass | No hidden characters or instructions to the AI in 66 files, including comments and the README |
Popularity & health: 58 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 82 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.starter-series/create-starter |
|---|---|
| Publisher | GitHub account starter-series |
| How the name is verified | Name verified via GitHub account starter-series. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | npm starter-series 0.5.3 (stdio) |
| Version | 0.5.3 |
| Published | |
| Last updated | |
| Source repository | https://github.com/starter-series/create-starter |
| Website | https://github.com/starter-series/create-starter#readme |
| Category | Security (assigned by keyword rule, not by hand) |
Related servers in Security
- KubeStellar MCP4/4AI-powered Kubernetes diagnostics, RBAC analysis, security checks,…
- ProdForge7/7Connects MCP servers, packages, security checks, and release gates…
- hexvero7/7Electron release diff for security review: what changed in IPC,…
- PostgreSQL CVE & Release Intelligence7/7PostgreSQL security for AI agents: CVEs, yanked releases, exploits,…
- safeinstall7/7Local-first supply-chain security gate for npm/pnpm/bun: typosquat,…
- release-gate7/7Pre-deploy security auditor for AI agent code — the risks generic…