Dependabot is a GitHub service that automates dependency updates in software projects by creating pull requests when new versions of dependencies are available, helping developers keep their projects secure and up-to-date.
Provides access to 5,000+ Key Performance Indicators across 264 operating areas for all Swedish municipalities and regions, enabling statistical analysis, comparisons, and trend tracking of Swedish public sector data.
21
45 npm
12
MIT
Why this server?
Enables querying of Dependabot alerts for GitHub repositories, providing visibility into dependency vulnerabilities
This server integrates with GitHub Advanced Security to load security alerts and bring it into your context. Supports Dependabot Security Alerts, Secret Scanning Alerts, Code Security Alerts
3
6 npm
5
MIT
Why this server?
Surfaces security alerts and CVE warnings by integrating with Dependabot and the GitHub Advisory Database.
Provides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.
10
3 npm
MIT
Why this server?
Provides automated triage for Dependabot alerts and pull requests as part of a headless workflow for maintaining open-source repositories.
Open source contribution manager — tracks PRs across repos, discovers contributable issues, diagnoses CI failures, and drafts maintainer responses. 21 MCP tools, 5 resources, 3 prompts. Ships
as CLI, MCP server, and Claude Code plugin.
20
26
MIT
Why this server?
Used for proactive dependency updates as part of the enterprise-grade quality measures, including OpenSSF Scorecard monitoring and Dependabot updates.
A local-first MCP server that provides AI agents with safe codebase access through file discovery, hybrid lexical-semantic search, and project introspection. It features durable local memory and semantic indexing while keeping all data and processing entirely on your local machine.
74
32 npm
6
MIT
Why this server?
Allows listing Dependabot alerts with severity-grouped counts.
Self-hosted GitHub MCP server for PR, repo file, and Dependabot operations, supporting multiple MCP clients with personal access token auth.
7
MIT
Why this server?
Analyzes Dependabot pull requests to provide human-readable upgrade plans with risk assessment, breaking changes, security fixes, and migration guidance
Translates a lockfile diff into a human-readable upgrade plan. For every dependency bump (npm or PyPI) returns semver class, breaking changes from GitHub release notes, CVEs fixed in the range, migration guide links, and a clear per-package recommendation. Bulk tool ranks up to 50 package changes in parallel by risk (security > caution > review > likely-safe > safe).
2
113 npm
2
MIT
Why this server?
Configures Dependabot for automated dependency updates in the generated project.
BackGen's MCP server lets AI assistants scaffold production-ready Express.js + TypeScript backend projects with your choice of ORM (Prisma, Drizzle, Mongoose), install auth/payment/storage plugins, generate CRUD resources, and run health checks — all through natural language conversation.
10
118 npm
4
MIT
Why this server?
Allows configuration of Dependabot for automated dependency updates.
Transforms any prompt into a fully functional, production-ready product with zero human intervention by providing 150+ autonomous tools covering all aspects of software development.