Analyzes npm packages for vulnerabilities, malicious behavior, suspicious scripts, maintainer risk and typosquatting, without an API key.
接入配置
该项目没有提供统一的启动命令，请按源码仓库的说明安装。
相关推荐
更多- DdepguardmopancPre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, hallucinated package guard and CycloneDX SBOM.安全15 仓库星标
- PProof of CommitmentpiiiicoScores supply-chain risk for npm, PyPI, Cargo and Go packages from behavioral signals such as publisher depth and release consistency.安全本地 + 远程8 仓库星标
- SSafeDep vet MCPSafeDep官方Vets open source packages for vulnerabilities and malicious code before agents add them to a project.安全1.1k 仓库星标
- BBoost MCPBoostSecurity官方Checks packages a coding agent wants to add and blocks dependencies with known vulnerabilities, malware or typosquatting.安全15 仓库星标
- SMCP Security AuditqianniuspaceAudits npm package dependencies for security vulnerabilities with real-time checks against the npm registry.安全57 仓库星标
- GGuardianMCPKalvisanScans npm and Composer project dependencies for known vulnerabilities and suggests fixes.安全1 仓库星标