Mmcp.market

Pkgdiet MCP server

by om-tajne·io.github.om-tajne/pkgdiet·v1.2.1
No reviews yet

Put your node_modules on a diet - find unused dependencies, analyze health, and reduce size

B74/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
Growing

4 stars75 downloads/wk

Reviews

Write one

Nobody has reviewed Pkgdiet yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Pkgdiet tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_dependency

    Check a dependency (e.g. npm package) for health, risk, and cost before installing.

  • get_policy

    Get the active PkgDiet dependency policy for this repository.

  • suggest_alternative

    Suggest a lighter, healthier alternative for a package.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

1 high
  • Code scan20 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    bin/cli.js: …d_process'); const changedFiles = execSync(`git diff --name-only ${options.base} HEAD`, { encoding: 'utf8' …
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

Runs npx -y pkgdiet on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add pkgdiet -- npx -y pkgdiet
Add to Cursor

Pkgdiet: common questions

Is Pkgdiet MCP server safe?
Mostly: it is graded B (74/100). Read the Pkgdiet safety report
How do I install Pkgdiet?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Pkgdiet need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Pkgdiet maintained?
The last commit was 6 days ago (2026-09-14). The latest release is v1.2.1.

More from om-tajne →