mcp-server-nodejs-api-docs

The server primarily fetches data from trusted, official Node.js documentation sources (nodejs.org, raw.githubusercontent.com) and uses an in-memory cache to reduce external calls. Explicit security linting rules (via eslint-plugin-security) are configured to prevent common vulnerabilities like arbitrary file system access, unsafe regex, child process execution, and eval with expressions. While object injection warnings are present in `src/tools/index.ts`, analysis shows the keys used are internally defined and not user-controlled, mitigating this specific risk. No hardcoded secrets or other malicious patterns were identified in the provided source code.