The Index · Security

Arc 1 vs Scf

Scf scores 3 points higher — a narrow lead. Read the evidence rows below before treating it as decisive. Both are measured the same way, on the same day, from public evidence only — so this is a comparison of two measurements rather than two marketing pages. How we measure ›

Arc 1Scfwhat it means
tashan score7174upkeep + freshness, gated by adoption
Adoption evidence3k/wk2k/wkthe raw public signal the score came from
Last releaseactiveactivenpm publish or repo push
Upkeep7398cadence, maintainers, status
Expertise gradenot gradedsolidan LLM read of its own documentation against a fixed rubric
Security auditno known advisories, no build provenanceno known advisoriesa summary — the full audit, free, is on each dossier
LicenceMIT
Maintainersone primarymore than onebus-factor risk

Install either

Arc 1

claude mcp add arc-1 -- npx -y arc-1

Scf

claude mcp add scf -- npx -y mcp-server-scf

Neither score is a security verdict — "well maintained" and "nothing known is wrong" are different claims, which is why the audit is a separate row and never folded into the number. The full audit for each — the advisory ids, the version that fixes them and anything that runs at install time — is free on its own page: Arc 1 · Scf.

All ranked Security ›