mcp-shipcheck
Related Servers
Alternatives to mcp-shipcheck
No user-submitted related servers found.
Related Servers
- -licenseNot gradedqualityBmaintenanceAudits npm dependencies for license compatibility, catching copyleft and source-available traps before shipping.-
- AlicenseNot gradedqualityCmaintenanceAudits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.MIT
- AlicenseNot gradedqualityCmaintenanceEnables auditing package.json files for real npm supply-chain attack mechanisms — typosquatted dependency names, malicious preinstall/install/postinstall scripts that pipe downloads into a shell or decode base64 payloads, and unpinned versions — plus live npm registry lookups that flag nonexistent, brand-new, deprecated, or typosquatted packages. It exposes dedicated tools for full manifest audits and single-name typosquat checks.MIT
- AlicenseNot gradedqualityDmaintenanceAudits your package-lock.json for supply-chain attacks before install. Cross-checks every resolved entry against the live npm registry to detect integrity mismatches, new install scripts, and other malicious signals.MIT
- AlicenseAqualityDmaintenanceProvides the real exported API surface and type signatures of any npm package, extracted from its published TypeScript declarations, enabling AI coding agents to use functions accurately and avoid inventing nonexistent APIs.39 npmMIT
- AlicenseNot gradedqualityBmaintenanceAnalyzes the publish size and full install size of npm packages, including dependencies.49 npmMIT
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose with no overlap: audit checks npm publish readiness, explainFailure decodes error codes, and packPreview shows file inclusions. An agent can easily distinguish between these three focused functions.
All tools follow a perfect verb_noun pattern (audit, explainFailure, packPreview) with consistent dot notation (shipcheck.*) and snake_case for multi-word names. The naming is highly predictable and readable throughout.
With 3 tools, this server is well-scoped for its purpose of npm package readiness checks. Each tool earns its place by covering distinct aspects (auditing, error explanation, and packing preview) without being overly sparse or bloated.
The toolset covers core npm package readiness workflows effectively: audit for checks, explainFailure for troubleshooting, and packPreview for validation. A minor gap exists in lacking a tool to directly fix issues (e.g., auto-correct or apply fixes), but agents can work around this using the explanations provided.