Checks packages a coding agent wants to add and blocks dependencies with known vulnerabilities, malware or typosquatting.
Setup
This project documents no single launch command; follow its repository instructions.
Boost MCP
BoostSecurityOfficial
Related
More- SSafeDep vet MCPSafeDepOfficialVets open source packages for vulnerabilities and malicious code before agents add them to a project.Security1.1k Repository stars
- NNPMScanNPMScanOfficialAnalyzes npm packages for vulnerabilities, malicious behavior, suspicious scripts, maintainer risk and typosquatting, without an API key.Security
- SMCP Security AuditqianniuspaceAudits npm package dependencies for security vulnerabilities with real-time checks against the npm registry.Security57 Repository stars
- OOSV MCPStacklokQueries the Open Source Vulnerabilities database by package version or commit, including batch queries.Security42 Repository stars
- VVulniCheckandrasfeScans Python dependencies against OSV, NVD and GitHub Advisory data, and also checks Docker files, secrets and MCP configurations.Security11 Repository stars
- GGuardianMCPKalvisanScans npm and Composer project dependencies for known vulnerabilities and suggests fixes.Security1 Repository stars