Related Servers

No user-submitted related servers found.

Related Servers

• dependency-fitness-mcp

  TweedBeetle

  A

  license

  A

  quality

  B

  maintenance

  An MCP server that provides cross-validated npm dependency fitness verdicts, including deprecation, malicious detection, and safe migration target inference.

  Updated 2 months ago (2026-06-08 18:29 UTC)

  2

  65

  MIT

• pkg-oracle

  julian-martin89

  A

  license

  -Not graded

  quality

  C

  maintenance

  An MCP server that verifies npm and PyPI packages before installation, checking for existence, known vulnerabilities, OpenSSF scorecard, and typosquatting, returning an ALLOW/WARN/BLOCK verdict.

  Updated 13 days ago (2026-08-08 10:30 UTC)

  MIT

• dependency-health

  NY5184

  F

  license

  A

  quality

  D

  maintenance

  An MCP server that performs comprehensive health checks on project dependencies for JavaScript and Python projects, detecting outdated packages and fetching changelogs.

  Updated 7 months ago (2026-01-08 20:19 UTC)

  1

• VulScan-MCP

  abhishekrai43

  F

  license

  -Not graded

  quality

  D

  maintenance

  MCP server that scans project dependencies for security vulnerabilities (CVEs) and provides fix instructions directly in VS Code via Copilot.

  Updated 9 months ago (2025-11-09 04:50 UTC)

  3

• AI Security Crew

  Srajangpt1

  A

  license

  -Not graded

  quality

  F

  maintenance

  A lightweight MCP server for security reviews that injects security requirements before code generation, scans dependencies for CVEs, and verifies generated code without disrupting workflow.

  Updated 4 months ago (2026-04-26 06:07 UTC)

  68

  MIT
• 

  deptrustofficial

  clidey

  A

  license

  -Not graded

  quality

  A

  maintenance

  deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service to trust or configure.

  Updated 24 days ago (2026-07-28 12:53 UTC)

  163

  60

  MIT