"OWASP Dependency-Check" matching MCP connectors:

DSAILAOAuth

ai.jaxon

Turn a written policy into rules a program can check, and get the same answer every time.

x402-gated safety checker for npm and PyPI packages. Built for AI coding agents to call before running npm install or pip install — flags nonexistent/typosquatted names, known CVEs (OSV.dev), and suspiciously new or low-download packages. $0.005 USDC per check on Base mainnet