Provides release history for Packagist packages, including available versions, prerelease and withdrawn flags, and changelog-style differences between version ranges.
Enables coding agents to query package release histories, version lists, and change summaries across PyPI, npm, crates.io, Packagist, NuGet, pub.dev, Go, and Maven Central to inform dependency upgrades and detect withdrawn versions.
5
MIT
Why this server?
Offers package vulnerability details, dependency trees, and licensing checks for PHP packages from Packagist.
Enables querying package ecosystem data from ecosyste.ms, including package metadata, versions, security advisories, dependencies, and repository information across 40+ package registries with fast local SQLite lookups and API fallback.
10
13 npm
9
MIT
Why this server?
Allows querying Packagist for the latest version of PHP packages.
Enables AI assistants to perform intelligent semantic code search across codebases using local AI embeddings for meaning-based retrieval.
6
47 npm
MIT
Why this server?
Checks Packagist (Composer) package versions against OSV, ranking each package by its worst vulnerability with KEV, EPSS and CVSS context and returning the smallest upgrade that fixes all of them.
Enables prioritizing vulnerabilities by real-world exploitation evidence, combining CISA KEV, EPSS, CVSS, and SSVC to rank CVEs and package versions, and providing fix recommendations.
4
MIT
Why this server?
Looks up package versions from Packagist (PHP Composer).
Unifies 21 supply chain security data sources into a single MCP server, enabling AI agents to perform comprehensive package audits, vulnerability checks, provenance verification, and risk assessment across multiple ecosystems.
90
113 npm
4
MIT
Why this server?
Queries Packagist for the latest version of PHP packages.
Provides verified dependency-audit verdicts for AI agents, checking installed versions against OSV advisories and splitting direct vs transitive dependencies.
