{"name":"io.github.Devrajsinh-Jhala/npx-vibe","slug":"devrajsinh-jhala-npx-vibe","title":"npx-vibe","description":"Read-only npm package and project dependency preflight tools for AI applications.","url":"https://mcp.market/server/devrajsinh-jhala-npx-vibe","rating":null,"grade":"A","score":92,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":27,"stars":0,"forks":0,"downloads_week":62,"last_push_at":"2026-10-02T08:32:07.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Devrajsinh-Jhala/NPM-Vibe-check","website":"https://devrajsinh-jhala.github.io/NPM-Vibe-check/","version":"3.0.0","remotes":[],"packages":[{"registryType":"npm","identifier":"npx-vibe","version":"3.0.0","transport":{"type":"stdio"},"packageArguments":[{"value":"--mcp","type":"positional"}]}],"tools":[{"name":"approve_scripts","description":"Review every dependency npm would allow to run an install script, and return approve, review, or deny for each with the source evidence behind it. Reads package-lock.json and never executes a script. Use when npm reports pending allowScripts entries or after a lockfile change adds one.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_providers","description":"Return the AI providers npx-vibe can call, the environment variable each reads its key from, and where that provider publishes its current model list. No model catalog is bundled, so a model must be named explicitly. This does not access a provider or require credentials.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_package","description":"Resolve, verify, and inspect one public npm registry package without executing package code. Use before installing, recommending, or running an unfamiliar package. Obey decision.action: continue, review, stop, or retry.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_project","description":"Inspect registry dependencies without installing or executing them. Default tree reviews require an npm lockfile packages map; directOnly explicitly narrows scope. Skipped packages or limits make coverage incomplete: retry, never continue. Use after dependency or lockfile changes and before installation.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":92,"grade":"A","scanned_at":"2026-10-29T18:47:13.492Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-29T18:47:13.428Z","components":{"code":{"score":25,"max":25,"notes":["22 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 27 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"npx-vibe","version":"3.0.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-10-02T08:34:42.160Z","repositoryUrl":"git+https://github.com/Devrajsinh-Jhala/NPM-Vibe-check.git","weeklyDownloads":62}],"repo":{"found":true,"owner":"Devrajsinh-Jhala","repo":"NPM-Vibe-check","archived":false,"pushedAt":"2026-10-02T08:32:07Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/84381242?v=4","ownerCreatedAt":"2021-05-18T09:41:46Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/84381242?v=4&s=128","source":"registry"},"presence":{"stars":0,"forks":0,"downloadsWeek":62,"license":"MIT","lastPushAt":"2026-10-02T08:32:07.000Z","score":27}}}},"grade_history":[],"reviews":[]}