fix: upgrade deps for MCP security score and make server zero-config

- Upgrade systeminformation ^5.23.5 → ^5.31.2 (root + mcp) — resolves 4 High CVEs
- Upgrade @modelcontextprotocol/sdk ^1.12.1 → ^1.27.1 — resolves 3 High CVEs
- Remove environmentVariables from mcp/server.json — defaults are hardcoded,
  MCP now works out of the box without any env var configuration
- Fix MCP server version announcement 0.1.0 → 0.2.0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: TheBlueHouse75

mcp/package-lock.json

@@ -40,15 +40,15 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@modelcontextprotocol/sdk": "^1.27.1",
     "@supabase/supabase-js": "^2.98.0",
     "chalk": "^5.3.0",
     "cli-table3": "^0.6.5",
     "commander": "^12.1.0",
     "ollama": "^0.5.12",
     "ora": "^8.1.1",
     "posthog-node": "^5.26.0",
-    "systeminformation": "^5.23.5",
+    "systeminformation": "^5.31.2",
     "zod": "^3.24.4"
   },
   "devDependencies": {

mcp/package.json

@@ -16,29 +16,7 @@
       "transport": {
         "type": "stdio"
       },
-      "environmentVariables": [
-        {
-          "description": "Supabase project URL for uploading results to the leaderboard",
-          "isRequired": false,
-          "format": "string",
-          "isSecret": false,
-          "name": "METRILLM_SUPABASE_URL"
-        },
-        {
-          "description": "Supabase anonymous key for uploading results",
-          "isRequired": false,
-          "format": "string",
-          "isSecret": true,
-          "name": "METRILLM_SUPABASE_ANON_KEY"
-        },
-        {
-          "description": "Base URL for public result pages",
-          "isRequired": false,
-          "format": "string",
-          "isSecret": false,
-          "name": "METRILLM_PUBLIC_RESULT_BASE_URL"
-        }
-      ]
+      "environmentVariables": []
     }
   ]
 }

mcp/server.json

@@ -20,7 +20,7 @@ import {
 
 const server = new McpServer({
   name: "metrillm",
-  version: "0.1.0",
+  version: "0.2.0",
 });
 
 // Register tools

mcp/src/index.ts

@@ -49,7 +49,7 @@
     "ollama": "^0.5.12",
     "ora": "^8.1.1",
     "posthog-node": "^5.26.0",
-    "systeminformation": "^5.23.5"
+    "systeminformation": "^5.31.2"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",