Skip to main content
Glama
@4da/mcp-server

@4da/mcp-server

Official

Related Servers

Alternatives to @4da/mcp-server

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      B
      maintenance
      Enables an AI agent to parse project lockfiles (npm, pnpm, Yarn, uv, Poetry, requirements.txt, Cargo, go.sum) and query OSV.dev to find known vulnerabilities in locked versions, transitive dependencies included, then produce minimal upgrade plans with breaking-change flags, cleanliness re-checks, and the parent dependency responsible. It also lists outdated packages and explains individual advisories, all read-only with no API key required.
      5
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Enables AI coding agents to ground dependency setup, compatibility checks, and major-version migration advice in a project's real runtime, lockfiles, and config files. It parses local project state and npm registry metadata deterministically, then returns tag-pinned install commands, breaking changes, and upgrade steps rather than generic documentation.
      5
      53 npm
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Enables AI coding agents to run sub-millisecond, fully offline CVE lookups and audit dependency manifests such as requirements.txt and package.json against known vulnerable version ranges. It returns CVSS severity details and calculates the minimal safe upgrade version needed to eliminate matching vulnerabilities, without rate limits or API keys.
      4
      MIT
    • A
      license
      B
      quality
      D
      maintenance
      Enables AI agents to safely upgrade JavaScript and TypeScript projects through dependency analysis, upgrade path detection, breaking change identification, codemod application, and PR summary generation.
      14
      15 npm
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables autonomous AI agents and CI/CD runners to discover repository modules, scan outdated dependencies, fetch version histories, and apply verified dependency updates with major-version safety guardrails across polyglot monorepos.
      877 npm
      MIT

    TDQS

    A3.7/5.0

    Scored across 11 tools

    Disambiguation3/5

    Several tools target the same vulnerability/health space: dependency_health, vulnerability_scan, and dependency_check all report CVEs but on different scopes (aggregate counts, project lockfiles, single version), which can confuse an agent picking between them. Likewise agent_memory and decision_memory both store decisions/warnings, and get_context vs what_should_i_know both surface context, though the 'call when' cues in descriptions help disambiguate.

    Naming Consistency3/5

    All names are snake_case so the casing is consistent, but the conventions are mixed: some are noun phrases (dependency_health, ecosystem_pulse, decision_memory), some are verb_noun (get_context, vulnerability_scan, check_decision_alignment), and one is a full question (what_should_i_know). It remains readable but there is no predictable verb_noun pattern throughout.

    Tool Count4/5

    Eleven tools sit comfortably in the ideal 3-15 range and the set is coherently scoped to dependency intelligence plus developer context. A few dependency tools (health, scan, check, planner, impact) could arguably be consolidated, but none feels gratuitous.

    Completeness4/5

    The surface covers the domain well: health, upgrade planning, vulnerability scanning, pre-write version vetting, impact analysis, decision memory, agent memory, ecosystem pulse, and user context. Minor gaps exist (e.g., no explicit dependency listing/package-family enumeration, no advisory search), but agents can work around them.

    Maintenance

    ActivityActive
    ResponsivenessLimited data