Related Servers

• mcp-server-npm

  ofershap

  A

  license

  A

  quality

  D

  maintenance

  MCP server to search npm packages, view details, compare, check downloads, and inspect dependencies.

  Updated 5 months ago (2026-03-10 09:22 UTC)

  6

  32

  MIT

Related Servers

• npm-guardian

  Baneado98

  A

  license

  -Not graded

  quality

  C

  maintenance

  Audits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.

  Updated 2 months ago (2026-06-22 16:48 UTC)

  MIT

• lockfile-guardian

  Baneado98

  A

  license

  -Not graded

  quality

  D

  maintenance

  Audits your package-lock.json for supply-chain attacks before install. Cross-checks every resolved entry against the live npm registry to detect integrity mismatches, new install scripts, and other malicious signals.

  Updated 2 months ago (2026-06-22 16:48 UTC)

  MIT

• import-guardian

  Baneado98

  A

  license

  -Not graded

  quality

  C

  maintenance

  Scans generated JavaScript/TypeScript code to detect AI-hallucinated or suspicious npm package imports before installation, providing a verdict of CLEAN, REVIEW, or BLOCK.

  Updated 2 months ago (2026-06-26 07:54 UTC)

  75

  MIT

• package-verify-mcp

  Anicodeth

  A

  license

  A

  quality

  C

  maintenance

  Verifies npm package names for safety, detecting typosquats and nonexistent packages before your coding agent installs them.

  Updated a month ago (2026-07-13 12:17 UTC)

  2

  15

  MIT

• DepShield MCP

  devanshkaria88

  A

  license

  A

  quality

  F

  maintenance

  Acts as a security checkpoint for AI coding agents by intercepting package installations to verify existence, check against CVE databases, and block vulnerable or hallucinated dependencies before they reach your codebase. Provides seven security tools including pre-install gates, full project audits, safe version recommendations, and deep transitive dependency scanning for npm and PyPI packages.

  Updated 5 months ago (2026-04-03 22:49 UTC)

  7

  13

  4

  MIT

• depscope-mcp

  cuttalo

  A

  license

  -Not graded

  quality

  C

  maintenance

  Validates and checks packages across 19 ecosystems to prevent AI agents from installing hallucinated, deprecated, or malicious packages.

  Updated 4 months ago (2026-05-05 02:00 UTC)

  126

  AGPL 3.0