@4da/mcp-server
OfficialRelated Servers
Alternatives to @4da/mcp-server
No user-submitted related servers found.
Related Servers
- AlicenseAqualityBmaintenanceEnables an AI agent to parse project lockfiles (npm, pnpm, Yarn, uv, Poetry, requirements.txt, Cargo, go.sum) and query OSV.dev to find known vulnerabilities in locked versions, transitive dependencies included, then produce minimal upgrade plans with breaking-change flags, cleanliness re-checks, and the parent dependency responsible. It also lists outdated packages and explains individual advisories, all read-only with no API key required.5MIT
- AlicenseAqualityBmaintenanceEnables AI coding agents to ground dependency setup, compatibility checks, and major-version migration advice in a project's real runtime, lockfiles, and config files. It parses local project state and npm registry metadata deterministically, then returns tag-pinned install commands, breaking changes, and upgrade steps rather than generic documentation.553 npmMIT
- AlicenseAqualityCmaintenanceEnables AI coding agents to run sub-millisecond, fully offline CVE lookups and audit dependency manifests such as requirements.txt and package.json against known vulnerable version ranges. It returns CVSS severity details and calculates the minimal safe upgrade version needed to eliminate matching vulnerabilities, without rate limits or API keys.4MIT
- AlicenseBqualityDmaintenanceEnables AI agents to safely upgrade JavaScript and TypeScript projects through dependency analysis, upgrade path detection, breaking change identification, codemod application, and PR summary generation.1415 npmMIT
- AlicenseAqualityAmaintenanceDependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.9590 npm2Apache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables autonomous AI agents and CI/CD runners to discover repository modules, scan outdated dependencies, fetch version histories, and apply verified dependency updates with major-version safety guardrails across polyglot monorepos.877 npmMIT
TDQS
Scored across 11 tools
Several tools target the same vulnerability/health space: dependency_health, vulnerability_scan, and dependency_check all report CVEs but on different scopes (aggregate counts, project lockfiles, single version), which can confuse an agent picking between them. Likewise agent_memory and decision_memory both store decisions/warnings, and get_context vs what_should_i_know both surface context, though the 'call when' cues in descriptions help disambiguate.
All names are snake_case so the casing is consistent, but the conventions are mixed: some are noun phrases (dependency_health, ecosystem_pulse, decision_memory), some are verb_noun (get_context, vulnerability_scan, check_decision_alignment), and one is a full question (what_should_i_know). It remains readable but there is no predictable verb_noun pattern throughout.
Eleven tools sit comfortably in the ideal 3-15 range and the set is coherently scoped to dependency intelligence plus developer context. A few dependency tools (health, scan, check, planner, impact) could arguably be consolidated, but none feels gratuitous.
The surface covers the domain well: health, upgrade planning, vulnerability scanning, pre-write version vetting, impact analysis, decision memory, agent memory, ecosystem pulse, and user context. Minor gaps exist (e.g., no explicit dependency listing/package-family enumeration, no advisory search), but agents can work around them.