Dep MCP server

by rog0x·io.github.rog0x/dep·v1.0.1

License check, outdated deps, security for AI agents

B72/100grade B

What users say

No reviews yet

Safety scan

B72/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Dep yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

dep_analyze_size
Estimate total node_modules size from package.json without installing. Uses the bundlephobia API to get minified and gzipped size for each production dependency.
dep_analyze_tree
Show the dependency tree: direct deps and their transitive deps, total depth, circular dependency detection, and total transitive dependency count.
dep_check_licenses
Analyze licenses of all dependencies in a package.json. Lists each dependency's license, flags copyleft (GPL) and unknown licenses, and checks compatibility.
dep_find_outdated
Check which dependencies are outdated. Compares current vs latest version, categorizes as major/minor/patch update, and shows days since last publish.
dep_security_audit
Check dependencies for known security vulnerabilities. Uses npm audit when available, falls back to the npm registry advisory API. Shows severity, affected versions, and fix recommendations.

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings

Code scan20 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 190 days ago4/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @rog0x/mcp-dep-tools on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dep -- npx -y @rog0x/mcp-dep-tools

Is Dep MCP server safe?: Mostly: it is graded B (72/100). Read the Dep safety report
How do I install Dep?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dep need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dep maintained?: The last commit was 206 days ago (2026-03-21). The latest release is v1.0.1.
What can I use instead of Dep?: Servers from other publishers that do the same job: Prodcheck MCP server, prodlint MCP server and Jikida MCP server. Compare all Dep alternatives.

Same job from other publishers: the closest match first, then the best rated.

Prodcheck
4,441 pre-production checks: security, performance, scale, integrations, post-launch.
not reviewed
Growing
A
prodlint
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
not reviewed
Growing
A
Jikida
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
not reviewed
Growing
A
Kastell
Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
not reviewed
Growing
B
grim-mcp
Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.
not reviewed
Growing
C