{"name":"io.github.ertugrulakben/dep-oracle","slug":"ertugrulakben-dep-oracle","title":null,"description":"Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.","url":"https://mcp.market/server/ertugrulakben-dep-oracle","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":11,"stars":0,"forks":0,"downloads_week":45,"last_push_at":"2026-03-13T23:36:50.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/ertugrulakben/dep-oracle","website":null,"version":"1.3.0","remotes":[],"packages":[{"registryType":"npm","identifier":"dep-oracle","version":"1.3.0","runtimeHint":"node","transport":{"type":"stdio"}}],"tools":[{"name":"dep_oracle_blast_radius","description":"Analyze the blast radius (import impact) of a package within a project. Scans all JS/TS source files to find how many files import the given package. Returns the count of affected files, their paths, and the percentage of the codebase impacted. Useful for understanding the risk if a dependency is compromised or needs replacement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_compare","description":"Compare two packages side-by-side by computing trust scores for both. Returns the full trust report for each package including scores, metrics, zombie status, and trend direction. Useful for evaluating alternatives or choosing between competing libraries.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_report","description":"Generate a JSON report for a project. Runs a full scan and outputs the results as formatted JSON. Optionally writes the report to a file. Returns the JSON content or the path to the generated file.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_scan","description":"Perform a full dependency security scan on a project directory. Parses the manifest (package.json, requirements.txt, etc.), collects data from registries and GitHub, computes trust scores for every dependency, detects zombies, typosquats, and calculates blast radius. Returns a complete ScanResult JSON with per-package trust reports and an overall project score.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_suggest_migration","description":"Get migration suggestions for a given package. Looks up the package in a curated knowledge base of common replacements and returns alternatives with descriptions and difficulty ratings. Useful for replacing deprecated, abandoned, or low-trust packages (e.g. moment -> dayjs, request -> got, lodash -> es-toolkit).","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_trust_score","description":"Calculate the trust score for a single package. Queries the registry, GitHub, OSV vulnerability database, and other sources to produce a weighted score (0-100) across 6 dimensions: security, maintainer, activity, popularity, funding, and license. Returns a TrustReport JSON with the overall score, per-dimension metrics, zombie status, and alternative suggestions.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_typosquat_check","description":"Check whether a package name is a potential typosquat of a popular package. Uses Levenshtein distance, homoglyph detection, and pattern analysis to identify suspicious package names that closely resemble well-known packages. Returns a risk assessment with similar package names and the edit distance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dep_oracle_zombies","description":"Detect zombie (abandoned/unmaintained) dependencies in a project. Parses the manifest, queries registry and GitHub for each dependency, and flags packages that show signs of abandonment: deprecated, no commits in 12+ months, no active maintainers, etc. Returns an array of zombie packages with severity levels and reasons.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":75,"grade":"B","scanned_at":"2026-09-28T14:26:29.779Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-09-28T14:26:29.771Z","components":{"code":{"score":25,"max":25,"notes":["23 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":4,"max":15,"notes":["last push 199 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"dep-oracle","version":"1.3.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":8,"publishedAt":"2026-02-22T21:43:12.933Z","repositoryUrl":"git+https://github.com/ertugrulakben/dep-oracle.git","weeklyDownloads":45}],"repo":{"found":true,"owner":"ertugrulakben","repo":"dep-oracle","archived":false,"pushedAt":"2026-03-13T23:36:50Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/176399532?v=4","ownerCreatedAt":"2024-07-23T12:56:40Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/176399532?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":45,"license":"MIT","lastPushAt":"2026-03-13T23:36:50.000Z","score":11}}}},"grade_history":[],"reviews":[]}