"npm" matching MCP servers:

Enables U.S. exclusion, debarment, and license screening for agents, returning results with Ed25519-signed receipts of which list snapshots were checked.

Scans npm, PyPI, and GitHub for typosquatting and brand impersonation, risk-scores findings, and drafts takedown notices.

Enables scanning of project dependencies across multiple package managers (npm, pip, cargo, etc.) and generates comprehensive markdown license reports. Supports automatic license detection from package registries with caching for improved performance.