context7-mcp-server

A full security audit cannot be performed as only the `README.md` was provided as 'source code'. The project directs users to download a `.zip` file containing an executable application from `raw.githubusercontent.com`, which is an atypical and less auditable distribution method compared to GitHub Releases. Running pre-compiled executables from unverified sources carries significant inherent security risks, including potential for malware, data exfiltration, or other malicious behavior, especially without the ability to inspect the actual source code. The `README` describes running a desktop application ('double-click the file to run the application') rather than deploying a server from source. This lack of transparency and an unusual distribution method make it impossible to deem safe.