We scanned 73 open-source MCP servers. Here's what source code analysis found