Upgrade X-Ray: npm & PyPI dependency update diff
Server Details
Diff two npm/PyPI versions or lockfiles: new install scripts, network/shell/eval calls, new deps.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- OAuth
- Works in Glama
- Last Tested
- Transport
- Streamable HTTP
- URL
Related MCP Connectors
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Check exact npm/PyPI upgrades for evidence-backed breaking changes; query APIs and components.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Related MCP Servers
- AlicenseAqualityAmaintenanceTranslates a lockfile diff into a human-readable upgrade plan. For every dependency bump (npm or PyPI) returns semver class, breaking changes from GitHub release notes, CVEs fixed in the range, migration guide links, and a clear per-package recommendation. Bulk tool ranks up to 50 package changes in parallel by risk (security > caution > review > likely-safe > safe).269 npm1MIT

codedeltaofficial
AlicenseNot gradedqualityCmaintenanceDeterministic code-churn measurement and AI-agent detection from the CodeDelta engine: measure churn between two directories or git refs, scan for code that runs AI agents, and get AI-authorship pointers. Runs fully locally.MIT- FlicenseNot gradedqualityBmaintenanceEnables coding agents and developers to detect SemVer 2.0 breaking changes by statically diffing Python AST public API surfaces, catching removed exports, parameter reordering, and other incompatible signature shifts. It returns deterministic refactoring plans and dependency graph metrics without any external pip dependencies.7-
- AlicenseNot gradedqualityCmaintenanceAudits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.