Dependency Auditor MCP server

by 4hmetuyar·io.github.4hmetuyar/dependency-auditor·v0.2.4·1 stars

CVE scanning for npm/pip/cargo dependencies via OSV

A86/100grade A

What users say

No reviews yet

Safety scan

A86/100

Adoption

Growing

1 stars456 downloads/wk

Reviews

Nobody has reviewed Dependency Auditor yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

audit_directory
Auto-detect and audit npm and pip manifests (package.json, requirements.txt, pyproject.toml) in a directory
audit_npm
Audit npm dependencies from a package.json (and optionally package-lock.json) for known CVEs using the OSV database
audit_package
Audit a single package by name, version, and ecosystem
audit_pip
Audit Python dependencies from requirements.txt or pyproject.toml for known CVEs using the OSV database

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings

Code scan17 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identitynamespace and repository owner differ4/10

Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @guardbee/mcp-dependency-auditor on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dependency-auditor -- npx -y @guardbee/mcp-dependency-auditor

From the Dependency Auditor repository's README, as published. We do not edit it. Read it on GitHub

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文

guardbee.ai — AI Security Copilot for websites.

GuardBee's family of MCP (Model Context Protocol) servers — a single monorepo, independent npm packages.

Nothing above is checked by us. What we check is on the safety report.

Is Dependency Auditor MCP server safe?: Yes, by our scan: it is graded A (86/100). Read the Dependency Auditor safety report
How do I install Dependency Auditor?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dependency Auditor need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dependency Auditor maintained?: The last commit was 12 days ago (2026-10-01). The latest release is v0.2.4.
What can I use instead of Dependency Auditor?: Servers from other publishers that do the same job: Npm Sentinel MCP server, Dep Scope MCP server and npm Registry MCP Server. Compare all Dependency Auditor alternatives.

Same job from other publishers: the closest match first, then the best rated.

Npm Sentinel
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
not reviewed
Growing
A
Dep Scope
Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
not reviewed
Growing
A
npm Registry MCP Server
npm registry MCP server — package intelligence, security audits, dependency analysis
not reviewed
Growing
B
Security Suite
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
More from GuardBee →
not reviewed
Growing
A
MCPProxy
Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
not reviewed
Growing
B