Dependency Auditor MCP server
CVE scanning for npm/pip/cargo dependencies via OSV
not scanned yet
1 stars295 downloads/wk
Reviews
Write oneNobody has reviewed Dependency Auditor yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dependency Auditor tools
No tool declarations could be read from the package source. They show once the server is installed.
How Dependency Auditor compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 90% of 918 Security servers
- GitHub stars
- 1
- more than 60% of 585 Security servers
- Downloads a week
- 295
- more than 80% of 240 Security servers with a package
Release history: 4 versions in the registry since 2026-10-13, latest 2026-10-30, typically one every 8 days.
Install Dependency Auditor in Claude Code, Cursor or VS Code
Runs npx -y @guardbee/mcp-dependency-auditor on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add dependency-auditor -- npx -y @guardbee/mcp-dependency-auditor
What the publisher says
From the Dependency Auditor repository's README, as published. We do not edit it. Read it on GitHub
guardbee-mcp
🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch
guardbee.ai — AI Security Copilot for websites.
GuardBee's family of MCP (Model Context Protocol) servers — a single monorepo, independent npm packages.
Packages
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Dependency Auditor: common questions
- Is Dependency Auditor MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Dependency Auditor safety report
- How do I install Dependency Auditor?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Dependency Auditor need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Dependency Auditor maintained?
- The last commit was 20 days ago (2026-10-13). The latest release is v0.8.1.
- What can I use instead of Dependency Auditor?
- Servers from other publishers that do the same job: Dep Scope MCP server, npm Registry MCP Server and Npm Sentinel MCP server. Compare all Dependency Auditor alternatives.
- How does Dependency Auditor compare with other Security MCP servers?
- safety score 91/100 (higher than 90% of 918 Security servers); github stars 1 (more than 60% of 585 Security servers); downloads a week 295 (more than 80% of 240 Security servers with a package). Full comparison.
Alternatives to Dependency Auditor
Same job from other publishers: the closest match first, then the best rated.
- Dep ScopeSymbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.not reviewedGrowingA
- npm Registry MCP Servernpm registry MCP server — package intelligence, security audits, dependency analysisnot reviewedGrowingB
- Npm SentinelAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.not reviewedGrowingA
- Security SuiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligencenot reviewedGrowingA
- MCPProxyLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savingsnot reviewedGrowingB