Skip to main content
Glama
lazymac2x

Project Health Scanner

by lazymac2x
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

Project Health Scanner

npm License: MIT

Get a 0-100 health score for any project in seconds. Scans for dependency vulnerabilities, hardcoded secrets, license conflicts, code quality issues, and git health problems. Returns actionable fix suggestions.

Why

You push code every day but never check if your dependencies have known CVEs, if someone committed an API key, or if your licenses conflict. This tool runs one scan and tells you everything.

Related MCP server: MCP Security Scanner

Install

npm i @lazymac/project-health-scanner

Quick Start

As REST API

npm start
# Server runs on http://localhost:3000

As MCP Server

Add to your Cursor/Claude Code MCP config:

{
  "mcpServers": {
    "project-health-scanner": {
      "command": "node",
      "args": ["node_modules/@lazymac/project-health-scanner/src/main.js"]
    }
  }
}

API Endpoints

POST /scan

Scan a project directory and get a full health report.

curl -X POST http://localhost:3000/scan \
  -H "Content-Type: application/json" \
  -d '{"path": "/path/to/your/project"}'

Response:

{
  "score": 72,
  "grade": "B",
  "checks": {
    "dependencies": { "score": 60, "issues": ["3 outdated packages", "1 known vulnerability"] },
    "secrets": { "score": 90, "issues": ["Possible API key in config.js:14"] },
    "licenses": { "score": 100, "issues": [] },
    "codeQuality": { "score": 65, "issues": ["12 files over 300 lines"] },
    "gitHealth": { "score": 85, "issues": ["No .gitignore found"] }
  },
  "suggestions": [
    "Run npm audit fix to resolve 1 vulnerability",
    "Rotate API key found in config.js and move to environment variable",
    "Add .gitignore from github/gitignore template"
  ]
}

MCP Tools

Tool

Description

scan_project

Full health scan with 0-100 score

check_dependencies

Dependency audit only

detect_secrets

Secret/API key detection only

check_licenses

License compatibility check

check_code_quality

Code quality metrics

check_git_health

Git repository health

What It Checks

  • Dependencies -- outdated packages, known vulnerabilities, unused dependencies

  • Secrets -- API keys, passwords, tokens, private keys in source code

  • Licenses -- MIT/Apache/GPL compatibility, missing license files

  • Code Quality -- file sizes, complexity indicators, TODO/FIXME counts

  • Git Health -- .gitignore presence, large files tracked, commit patterns

Links

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Resources

Related MCP Connectors

Related MCP Servers

  • Security Scanner MCP Server

    rupeedev
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.
    5 npm
    2
    MIT

  • MCP Security Scanner

    JMitac
    A
    license
    A
    quality
    D
    maintenance
    Enables comprehensive security scanning of code projects, detecting vulnerabilities in dependencies, code patterns (XSS, eval, etc.), and exposed secrets, with detailed reports in Spanish prioritized by severity.
    4
    142 npm
    MIT

  • codescan-mcp

    yifanyifan897645
    A
    license
    Not graded
    quality
    D
    maintenance
    Scans codebases for TODOs, FIXMEs, code complexity, file stats, and dependencies, generating a health report with a letter grade. Zero configuration required.
    8 npm
    MIT