RepoProof client dependency notices

No third-party runtime code is bundled in this source archive. npm ci installs the integrity-pinned packages separately. License names below are recorded from the lockfile; consult each upstream package for full terms.

@modelcontextprotocol/client 2.4.0 — Apache-2.0 — https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.4.0.tgz
@modelcontextprotocol/core 2.4.0 — Apache-2.0 — https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.4.0.tgz
@modelcontextprotocol/server 2.4.0 — Apache-2.0 — https://registry.npmjs.org/@modelcontextprotocol/server/-/server-2.4.0.tgz
cross-spawn 7.0.6 — MIT — https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz
eventsource 3.0.7 — MIT — https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz
eventsource-parser 3.1.1 — MIT — https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz
isexe 2.0.0 — ISC — https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz
jose 6.2.14 — MIT — https://registry.npmjs.org/jose/-/jose-6.2.14.tgz
path-key 3.1.1 — MIT — https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz
pkce-challenge 5.0.1 — MIT — https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz
shebang-command 2.0.0 — MIT — https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz
shebang-regex 3.0.0 — MIT — https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz
which 2.0.2 — ISC — https://registry.npmjs.org/which/-/which-2.0.2.tgz
zod 4.6.7 — MIT — https://registry.npmjs.org/zod/-/zod-4.6.7.tgz

Official MCP SDK: https://github.com/modelcontextprotocol/typescript-sdk
Zod: https://github.com/colinhacks/zod
