Mmcp.market

Npm Plus MCP server

by ofershap·io.github.ofershap/npm-plus·v1.0.1·1 stars
No reviews yet

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Npm Plus yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Npm Plus tools (8)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • bundle_size

    Get bundle size (minified + gzip) for an npm package via Bundlephobia.

  • compare_downloads

    Compare download counts across multiple packages.

  • dependency_tree

    Get dependency tree for an npm package (direct deps only).

  • download_trends

    Get download trends (daily breakdown + sparkline) for an npm package.

  • downloads

    Get download statistics for an npm package.

  • package_info

    Get detailed info about an npm package: description, license, repo, dependencies.

  • search

    Search npm packages by query. Returns name, version, description, and keywords.

  • vulnerabilities

    Get vulnerability info for an npm package. Note: Full audit requires npm audit in project context.

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 202 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Npm Plus in Claude Code, Cursor or VS Code

Runs npx -y mcp-server-npm-plus on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add npm-plus -- npx -y mcp-server-npm-plus
Add to Cursor

Npm Plus: common questions

Is Npm Plus MCP server safe?
Mostly: it is graded B (75/100). Read the Npm Plus safety report
How do I install Npm Plus?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Npm Plus need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Npm Plus maintained?
The last commit was 217 days ago (2026-03-10). The latest release is v1.0.1.
What can I use instead of Npm Plus?
Servers from other publishers that do the same job: LetsFG — Flights & Hotels MCP server, GitHits MCP server and Kody MCP server. Compare all Npm Plus alternatives.

Alternatives to Npm Plus

Same job from other publishers: the closest match first, then the best rated.

All Npm Plus alternatives →
  • LetsFG — Flights & Hotels
    Search and book flights and hotels: hundreds of airlines, plus bookable hotel rates.
    A
  • GitHits
    Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.
    A
  • Kody
    Your agents' cloud. MCP server with search, execute, packages, jobs, secrets, and integrations.
    A
  • Arxiv
    Search arXiv papers, download full text, semantic search, citation graphs, and alerts via MCP.
    A
  • Workopia — Job Search
    Search 6.3M+ live jobs from companies' own career pages, plus resume tailoring & cover letters.
    B

More from ofershap →