Answers are grounded in this paper and cite their sources.
Observational analysis uncovers silent maintainer handovers in the Model Context Protocol registry, indicating hidden custody transitions across software packages.
204 custody events on 199 packages observed by a daily external diff of the official Model Context Protocol server registry and its npm packages, 2026-07-30 to 2026-09-02. Each event records who controlled the package name before and after, and whether a version was published the same UTC day. Headline: maintainer handovers are usually silent (32 of 42 without a same-day release, 76.2%), repository moves almost never (1 of 77). Includes a stdlib recount script, the signed daily manifest (Ed25519) and OpenTimestamps proofs anchoring the frozen file in Bitcoin. Registry surface only; lower bounds; no hostile takeover identified. See README for limitations.
No takes yet. Share an insight, caveat, or question.
Nikolai Otrishko (2026) studied this question.
Synapse has enriched 8 closely related papers on similar clinical questions. Consider them for comparative context: