Skip to main content
Glama
depsonar

depsonar

by Soflutionltd

Related Servers

Alternatives to depsonar

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      D
      maintenance
      MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities.
      5
      55 npm
      MIT
    • A
      license
      Not graded
      quality
      A
      maintenance
      This MCP server enables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories, returning vulnerability reports in text or JSON with configurable severity thresholds and dev-dependency filtering.
      5 npm
      MIT
    • F
      license
      A
      quality
      D
      maintenance
      An MCP server that performs comprehensive health checks on project dependencies for JavaScript and Python projects, detecting outdated packages and fetching changelogs.
      1
      -

    TDQS

    A4/5.0

    Scored across 25 tools

    Disambiguation3/5

    Most tools have distinct purposes, but the three security scanning tools (depsonar_audit, depsonar_live_cve, depsonar_cve) could easily be confused, as could depsonar_check vs depsonar_scan. Descriptions help but the boundaries are subtle (local vs OSV vs curated framework CVEs). Some overlap between depsonar_deprecated and depsonar_check also adds ambiguity.

    Naming Consistency5/5

    All tools follow a consistent depsonar_<verb_noun> pattern in snake_case. Examples like depsonar_update_all and depsonar_setup_checker maintain the same structure. No mixed conventions or vague names.

    Tool Count3/5

    At 25 tools, this is at the upper boundary of what feels reasonable. The breadth is justified by the comprehensive scope (dependency updates, security, runtimes, Docker, CI, licenses, docs), but several tools could be consolidated (e.g., merging audit/live_cve/cve into one). The count feels heavy but not chaotic.

    Completeness4/5

    The toolset covers an impressive range of dependency health and security workflows: scanning, updating, auditing, secrets, licenses, runtimes, CI, and migration. Minor gaps exist, such as no explicit 'add dependency' or 'remove dependency' tool and no rollback mechanism for updates. However, core lifecycle coverage is strong, and the 'infra' tool aggregates everything.

    Maintenance

    ActivityMaintained
    ResponsivenessSyncing