Skip to main content
Glama

oss_dependency_velocity_tracker

Read-onlyIdempotent

As a CTO, track the update velocity of your project's open-source dependencies to assess their impact on DORA metrics like deployment frequency and lead time. This tool fetches release history and version adoption data from npm registry and libraries.io, providing insights into dependency freshness, update frequency, and potential risks. Input a list of package names and optional version ranges to analyze. Outputs structured dependency velocity metrics and warnings about stale or rapidly changing packages.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
asyncNoIf true, returns a job_id immediately (<200ms) instead of waiting for the result. Poll the result with job_result(job_id). Use for slow tools to avoid client timeouts.
packagesYes
lookbackDaysNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
statusYes
metricsNo
sourcesNo
warningsNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, openWorld, and idempotent hints, so the description doesn't need to restate those. It adds valuable behavioral context by naming the external data sources (npm registry and libraries.io), describing the output (structured metrics and warnings), and noting what triggers warnings (stale or rapidly changing packages). No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three well-organized sentences: purpose, data sources, input, and output. It is front-loaded with the core use case, then provides necessary details without fluff or repetition. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity and the presence of an output schema, the description covers the essential points: intended user, input, data sources, and output. It is nearly complete but lacks explicit mention of the optional 'lookbackDays' parameter and has a slight ambiguity with 'version ranges' (schema expects 'version' as a string). These small gaps prevent a perfect score.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is low (33% with only async described). The description compensates by explaining the main parameter ('Input a list of package names and optional version ranges') and clarifying the version field's role. However, it does not mention the 'lookbackDays' parameter at all, leaving a gap in understanding for that parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool's purpose: tracking update velocity of open-source dependencies and assessing impact on DORA metrics. It uses a specific verb-resource combination ('track the update velocity') and distinguishes itself from related siblings like dependency_vulnerability_scan by focusing on velocity rather than vulnerabilities.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a clear use case (CTO assessing DORA impact) and implies when to use this tool, but does not explicitly mention alternatives or exclusion scenarios. It lacks a direct 'use this instead of X' statement, but the context is understandable and relevant for the target user.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

C2.4/5.0
Disambiguation1/5

Over 50 tools share the identical template 'Gapup agent-payable C-suite expertise' with similar French descriptions and reference cases, making their boundaries indistinguishable. Clusters like competitor_intel, competitive_deep_dive, competitor_moves, competitor_profiles, competitor_pricing_radar, competitor_pricing_scrape, and competitor_recommendations heavily overlap in purpose.

Naming Consistency1/5

Names are chaotic: mix of French and English, snake_case and camelCase, verb_noun, noun, and adjective forms with no uniform pattern. Examples like 'bp_narratif', 'content_enrichment', 'ai_governance_full_report_async', and 'job_result' show no coherent naming convention.

Tool Count1/5

271 tools is far beyond any reasonable MCP server scope, creating an overwhelming selection burden for agents. This count vastly exceeds the 25+ threshold for 'too many' and makes navigation impractical.

Completeness2/5

While the server covers many business domains, it lacks lifecycle operations (e.g., no update/delete tools for the deliverables it generates) and the input specifications are vague ('documented case fields' without documentation), creating functional dead ends. The sheer breadth does not compensate for these gaps.