Scan a frontend package.json for security risks — CVEs, license issues, and abandoned dependencies — and receive a SHIP/CAUTION/BLOCK verdict.
Sleepycat
271,170 tools. Last updated 2026-07-08 02:05
"namespace:io.github.shipping-ship-it" matching MCP tools:
- Assess npm package security risk with frontend-specific signals: weekly downloads, UI component flag, CVE counts, licence risk, and maintainer health. Returns SHIP/CAUTION/BLOCK verdict.Sleepycat
- Define the workspace directory for network topology files, validating it under your home directory and creating it automatically if it does not exist.Apache 2.0
- Retrieve Patchistry shipping and returns policy: free US shipping, 2-3 day delivery, 30-day returns with free label, group orders, international to 27+ countries.MIT
- Get a single SHIP/CAUTION/BLOCK verdict for any package by combining CVEs, license risk, maintainer health, and transitive dependencies in one call.Sleepycat
- Fetch a public image, re-encode it in WebP, AVIF, or JPEG, and optionally resize to reduce file size. Returns optimized image with byte savings.MIT
Matching MCP Servers
- Flicense-qualityCmaintenanceEnables to interact with GitHub repositories directly from Claude, supporting actions like viewing repos, checking status, committing and pushing changes, and managing pull requests.Last updated
- Creative Commons Zero v1.0 Universal
Matching MCP Connectors
ship-on-friday MCP — wraps StupidAPIs (requires X-API-Key)
dati.gov.it MCP — Italy's national open-data portal (CKAN API).
- Close out a ledger item by marking it done. Optionally attach a ship proof with commit SHA or PR URL for verified completion.MIT
- Validate a release passes preflight checks before rollout. Confirms safety to ship based on environment and version.MIT
- Check if a coupon code is valid and see the credit amount it provides, without redeeming it.MIT
- Plan a multi-service release by analyzing git history to list services, changes, and version bumps for an environment.MIT
- Publish a post by marking it as complete (wip: false). Use this only to ship without other changes; otherwise update the post with wip: false.MIT
- Mint a new API key for your organization. The full key is returned only once; store it securely as the server cannot reveal it again.MIT
- Assess release readiness across your tenant to get a ship, review, or block recommendation with confidence score and coverage analysis. Use before deciding to release.MIT
- Complete a timer to stop it permanently and convert it into a timelog. Use this action to finalize time tracking for a task.MIT
- Archives a campaign by soft-deleting it, removing it from default lists, and stopping its scheduler while preserving collected scans.MIT
- Delete a webhook destination to stop it from receiving events.MIT
- Explains a single security audit check: describes what it checks, why it matters, how to fix it, its fix tier (SAFE/GUARDED/FORBIDDEN), and relevant compliance standards (CIS, PCI-DSS, HIPAA). Supports fuzzy lookup.Apache 2.0
- Query a symbol's relationships for impact analysis: who calls it, what it calls, implementations, and non-call references.MIT
- Delete a tag permanently, removing it from all resources it is attached to. This action cannot be undone.Apache 2.0
- Assess quality risk by analyzing coverage heatmap, execution history, and 30-day trends. Identifies high and medium risk areas to answer whether it is safe to ship or where more tests are needed.MIT