Search results

enhance(sdk): validateMcpb should verify entry_point is a regular file matching server.type

Status: Open.

#98 In NimbleBrainInc/mpak;

· mgoldsborough opened on May 7, 2026

chore(security): move artifact filename path-safety to schema layer (consistency)

Status: Open.

#97 In NimbleBrainInc/mpak;

· mgoldsborough opened on May 7, 2026

chore(security): validate mcp_config.args/command resolved paths stay within bundle cache

Status: Open.

#96 In NimbleBrainInc/mpak;

· mgoldsborough opened on May 7, 2026

Bundle cache grows unbounded — no dep dedup, no eviction policy

Status: Open.

#95 In NimbleBrainInc/mpak;

· mgoldsborough opened on May 7, 2026

Publishers can't see which MTF controls failed (no path from L0 → L1)

Status: Open.

#92 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 30, 2026

Python interpreter resolution is silent and version-blind

Status: Open.

#90 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 28, 2026

Expose env-alias tier (substituteEnvVars / gatherUserConfig) publicly

Status: Open.

#86 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 20, 2026

Align mpak-schemas with canonical MCPB v0.4 user_config spec

Status: Open.

#84 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 20, 2026

skill-pack publish pipeline is broken end-to-end: two critical blockers

Status: Open.

#80 In NimbleBrainInc/mpak;

· JoeCardoso13 opened on Apr 17, 2026

mpak update reports success without actually updating the cache

Status: Open.

#79 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 17, 2026

SDK downloads wrong platform bundle (darwin on linux)

Status: Open.

#78 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 9, 2026

Add packSkill() to SDK for building .skill bundles programmatically

enhancementNew feature or requestNew feature or request

pkg/sdk-typescriptTypeScript SDK (@nimblebrain/mpak-sdk)TypeScript SDK (@nimblebrain/mpak-sdk)

Status: Open.

#76 In NimbleBrainInc/mpak;

· mgoldsborough opened on Apr 8, 2026