Which integrations are available for this server?

Audits npm dependencies from package.json/package-lock.json for known vulnerabilities and suggests fixed versions. Audits Python/PyPI dependencies from requirements.txt or pyproject.toml for known vulnerabilities and suggests fixed versions. Allows auditing RubyGems packages for known vulnerabilities and suggested fixes via OSV. Allows auditing Rust/crates.io packages for known vulnerabilities and suggested fixes via OSV.

How do I use @guardbee/mcp-dependency-auditor?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@@guardbee/mcp-dependency-auditor Can you audit the npm dependencies in this project for known CVEs?" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

@guardbee/mcp-dependency-auditor

npm version npm downloads License: MIT

npm, pip ve diğer paket yöneticilerinin bağımlılıklarını bilinen CVE'ler için OSV veritabanına karşı tarayan MCP sunucusu. Claude'a doğrudan projenizin güvenlik durumunu sorabilirsiniz.

Özellikler

OSV API Entegrasyonu — Google'ın açık kaynak güvenlik açığı veri tabanı (ücretsiz, kimlik doğrulaması gerektirmez)
npm Desteği — package.json ve package-lock.json (v1/v2/v3) okunur; kilitli sürümler tercih edilir
pip Desteği — requirements.txt, requirements/base.txt, requirements/prod.txt ve pyproject.toml
Severity Skorlaması — CVSS puanına veya metin buluşsal yöntemine göre Critical / High / Medium / Low
Düzeltme Sürümü — Mevcut olduğunda upgrade to X@Y.Z.Z önerisi
CVE Bağlantıları — NVD veya osv.dev'e doğrudan link
20 Unit Test — %100 geçen test paketi

Related MCP server: GuardianMCP

Hızlı Başlangıç

npm install -g @guardbee/mcp-dependency-auditor

claude_desktop_config.json dosyasına ekleyin:

{
  "mcpServers": {
    "guardbee-dependency-auditor": {
      "command": "npx",
      "args": ["-y", "@guardbee/mcp-dependency-auditor"]
    }
  }
}

MCP Tools

Tool	Açıklama
`audit_npm`	`package.json` / `package-lock.json` içindeki npm bağımlılıklarını denetler
`audit_pip`	`requirements.txt` / `pyproject.toml` içindeki Python bağımlılıklarını denetler
`audit_package`	Tek bir paketi ad, sürüm ve ekosisteme göre denetler
`audit_directory`	Desteklenen tüm manifest dosyalarını otomatik tespit ederek denetler

Örnek Kullanım

Claude'a şunu sorabilirsiniz:

"Bu projemin npm bağımlılıklarını denetle: /Users/me/my-app"

"lodash 4.17.20 sürümünde CVE var mı?"

"Python projemi tara: /Users/me/django-app"

Örnek Çıktı

⚠️  Found 3 vulnerabilities in 2/142 npm packages (1243ms)
   Critical: 1  High: 1  Medium: 1  Low: 0  Unknown: 0

[CRITICAL] lodash@4.17.20
  ID      : GHSA-35jh-r3h4-6jhm (CVE-2021-23337)
  Summary : Command injection via template
  Fix     : upgrade to lodash@4.17.21
  Details : https://nvd.nist.gov/vuln/detail/CVE-2021-23337

Desteklenen Ekosistemler

audit_package tool'u şu ekosistemler için doğrudan sorgu yapabilir:

Ekosistem	Parametre
npm	`npm`
Python	`PyPI`
Rust	`crates.io`
Java	`Maven`
Go	`Go`
Ruby	`RubyGems`

CLI — CI/CD Entegrasyonu

MCP server moduna ek olarak doğrudan CLI olarak da kullanılabilir:

# Dizindeki tüm bağımlılıkları denetle (npm + pip otomatik tespit)
npx @guardbee/mcp-dependency-auditor audit ./my-project

# Sadece npm
npx @guardbee/mcp-dependency-auditor audit-npm . --fail-on=critical

# Sadece pip
npx @guardbee/mcp-dependency-auditor audit-pip . --fail-on=high

# Tek paket
npx @guardbee/mcp-dependency-auditor audit-pkg lodash 4.17.20 npm

# JSON çıktı
npx @guardbee/mcp-dependency-auditor audit . --format=json

Exit kodları: 0 = temiz · 1 = threshold üstü bulgu · 2 = hata

GitHub Actions

name: Dependency Audit
on: [push, pull_request]

jobs:
  audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
      - run: npm ci
      - name: Audit dependencies
        run: npx @guardbee/mcp-dependency-auditor audit . --fail-on=high

GitLab CI

dependency-audit:
  image: node:20
  script:
    - npx @guardbee/mcp-dependency-auditor audit . --fail-on=high
  only:
    - merge_requests
    - main

Pre-commit Hook

# .git/hooks/pre-push
npx @guardbee/mcp-dependency-auditor audit . --fail-on=critical || exit 1

Geliştirme

npm install
npm test          # 20 unit test
npm run build     # TypeScript derleme

Lisans

MIT — GuardBee

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityMaintained

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

NPMScan A
io.github.salemalem
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Security Code Analysis Developer Tools
231
Security Intel MCP A
io.github.selflabbs
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Security Penetration Testing
2
Security Intel MCP A
com.datakoot
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Penetration Testing Security
31
osv-advisory-mcp-server A
io.github.cyanheads
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Penetration Testing Developer Tools Security
421

Related MCP Servers

CVE Checker for Node Modules
Developer Tools Security Testing & QA Tools
RobinBreugelmans-S
F
license
B
quality
D
maintenance
Enables checking npm packages for known security vulnerabilities using the OSV API before installation. Supports both single package checks and bulk vulnerability scanning for multiple packages at once.
Updated a year ago (2025-10-24 13:45 UTC)
2
-
GuardianMCP
Developer Tools Security Testing & QA Tools
Kalvisan
A
license
A
quality
D
maintenance
Automatically scans project dependencies (npm, Composer) for security vulnerabilities using the OSV.dev database, providing real-time alerts and detailed remediation guidance directly in your IDE.
Updated 9 months ago (2025-11-26 11:18 UTC)
1
7
1
MIT
Dependency Checker MCP Server
Security Developer Tools Testing & QA Tools
djodjonx
A
license
B
quality
C
maintenance
Enables security scanning for npm dependencies by checking manifest and lockfiles against the OSV.dev and Socket.dev vulnerability databases. It provides tools to detect vulnerabilities in specific packages and retrieve detailed technical reports for identified security issues.
Updated 9 months ago (2025-11-28 13:13 UTC)
3
14
MIT
osv-ui-mcp
Developer Tools Security Testing & QA Tools
toan203
A
license
A
quality
A
maintenance
Visual CVE audit dashboard for npm, Python, Go, and Rust projects. Scans your project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against OSV.dev live data, opens a browser dashboard for human review, then applies fixes only after explicit confirmation. Supports multi-service monorepos in one command.
Updated 11 days ago (2026-08-31 03:23 UTC)
4
207
4
MIT