Summary
@notionhq/notion-mcp-server ships CLAUDE.md (Claude Code project guide) inside the published npm tarball, observable via npx @notionhq/notion-mcp-server.
Repro
npm pack @notionhq/notion-mcp-server@latest
tar tzvf notionhq-notion-mcp-server-*.tgz | grep CLAUDE.md
Why this matters
CLAUDE.md is a maintainer-facing project guide. No runtime purpose for consumers. Two issues:
- Adds bytes to every install and every
npx cache.
- Claude Code can auto-load
CLAUDE.md files from tool-touched directories — if a downstream developer reads files inside the installed package (especially likely for an MCP server that ships with Claude Code workflows), this guide can inject into their session context.
Suggested fix
Add a files allowlist to package.json, or add CLAUDE.md to .npmignore.
Context
Found during a Claude Code permissions audit. Filing individually across several npm packages with the same pattern. Happy to PR if useful.
Summary
@notionhq/notion-mcp-servershipsCLAUDE.md(Claude Code project guide) inside the published npm tarball, observable vianpx @notionhq/notion-mcp-server.Repro
Why this matters
CLAUDE.mdis a maintainer-facing project guide. No runtime purpose for consumers. Two issues:npxcache.CLAUDE.mdfiles from tool-touched directories — if a downstream developer reads files inside the installed package (especially likely for an MCP server that ships with Claude Code workflows), this guide can inject into their session context.Suggested fix
Add a
filesallowlist topackage.json, or addCLAUDE.mdto.npmignore.Context
Found during a Claude Code permissions audit. Filing individually across several npm packages with the same pattern. Happy to PR if useful.