Related Servers

• CVE Checker for Node Modules

  RobinBreugelmans-S

  F

  license

  B

  quality

  D

  maintenance

  Enables checking npm packages for known security vulnerabilities using the OSV API before installation. Supports both single package checks and bulk vulnerability scanning for multiple packages at once.

  Updated 10 months ago (2025-10-24 13:45 UTC)

  2

Related Servers

• dep-guard-mcp

  mdjahidanwar

  F

  license

  -

  quality

  C

  maintenance

  Scans Python, Node.js, Java/Spring, and PHP dependency manifests for known vulnerabilities using OSV and GitHub Advisory APIs.

  Updated 5 months ago (2026-03-29 19:29 UTC)

• locklens

  BARMPlus

  A

  license

  B

  quality

  D

  maintenance

  Audits package lockfiles for vulnerabilities, supporting npm, yarn, and pnpm. Runs via CLI or as an MCP server over stdio.

  Updated 3 months ago (2026-05-22 09:30 UTC)

  1

  16

  85

  MIT

• GuardianMCP

  Kalvisan

  A

  license

  A

  quality

  D

  maintenance

  Automatically scans project dependencies (npm, Composer) for security vulnerabilities using the OSV.dev database, providing real-time alerts and detailed remediation guidance directly in your IDE.

  Updated 9 months ago (2025-11-26 11:18 UTC)

  1

  8

  1

  MIT
• 

  Git-Fabric CVEofficial

  git-fabric

  A

  license

  -

  quality

  -

  maintenance

  Provides tools for autonomous CVE detection, enrichment, and remediation across managed repositories using GHSA and NVD data. It enables automated triage and pull request creation for dependency fixes based on configurable severity policies.

  Updated 6 months ago (2026-02-21 09:22 UTC)

• DepsGuard MCP

  Kim-Kyowon

  A

  license

  A

  quality

  C

  maintenance

  AI-powered dependency vulnerability and breaking change analyzer that scans dependencies, identifies vulnerabilities via OSV.dev, and uses AI to assess real impact and suggest fixes.

  Updated 2 months ago (2026-06-17 07:56 UTC)

  3

  Apache 2.0

• CodeInspectus

  Synvoya

  A

  license

  A

  quality

  A

  maintenance

  Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

  Updated 11 days ago (2026-08-05 05:49 UTC)

  6

  305

  39

  MIT