"author:kalash33" matching MCP servers:

Lets a coding agent check a dependency or lockfile before adding it, tracing the exact chain by which a compromised package, maintainer account, or unpinned MCP server could reach the project. It answers supply-chain questions against a FalkorDB graph of npm, PyPI, and AI-tool MCP configs, showing the queries and evidence behind each result.