Checks packages a coding agent wants to add and blocks dependencies with known vulnerabilities, malware or typosquatting.
接入配置
该项目没有提供统一的启动命令，请按源码仓库的说明安装。
相关推荐
更多- SSafeDep vet MCPSafeDep官方Vets open source packages for vulnerabilities and malicious code before agents add them to a project.安全1.1k 仓库星标
- NNPMScanNPMScan官方Analyzes npm packages for vulnerabilities, malicious behavior, suspicious scripts, maintainer risk and typosquatting, without an API key.安全
- SMCP Security AuditqianniuspaceAudits npm package dependencies for security vulnerabilities with real-time checks against the npm registry.安全57 仓库星标
- OOSV MCPStacklokQueries the Open Source Vulnerabilities database by package version or commit, including batch queries.安全42 仓库星标
- VVulniCheckandrasfeScans Python dependencies against OSV, NVD and GitHub Advisory data, and also checks Docker files, secrets and MCP configurations.安全11 仓库星标
- GGuardianMCPKalvisanScans npm and Composer project dependencies for known vulnerabilities and suggests fixes.安全1 仓库星标