Dependency Auditor alternatives

1

Dep Scope

by FlorianBruniaux

A

Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.

2

npm Registry MCP Server

by YawLabs

B

npm registry MCP server — package intelligence, security audits, dependency analysis

3

Npm Sentinel

by Nekzus

A

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

4

Security Suite

by 4hmetuyar

A

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

5

MCPProxy

by smart-mcp-proxy

B

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

6

SafeWeave

by safeweave.dev

C

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

7

pkgxray

by adamsjack711-ux

B

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

8

EchelonGraph CVE & Exposure

by echelongraph.io

A

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

9

Oauth Auditor

by 4hmetuyar

A

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

10

Hookcheck

by CloudCorpRecords

A

Persistence hook auditor: scan repos for auto-exec hooks, flag Shai-Hulud patterns.

11

ConnectSecure MCP

by Servosity

B

Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots

12

Sn1per MCP Server: pentest, recon and attack surface scanning

by 1N3

A

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

13

Keyspoor

by majiayu000

A

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

14

Security MCP

by pratham-jain33

A

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

15

WARDEN — MCP Security Firewall

by alexar76

A

MCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

17

4da

by 4DA-Systems

A

Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.

18

DataNexus MCP

by datanexusmcp.com

B

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

19

MobiLoop

by enessubass

A

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

20

MCP Safety Warden

by gautamvarmadatla

B

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

21

Repository Intelligence

by nirholas

B

Analyze repos of any size - security scanning code analysis monorepo support