dep-scout MCP server
io.github.unievolver/dep-scout·v0.2.0·1 starsHelp AI agents find and evaluate mature packages across 6 ecosystems instead of reinventing them.
1 stars
Reviews
Write oneNobody has reviewed dep-scout yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
dep-scout tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 102 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How dep-scout compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 70/100
- higher than 35% of 48,255 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
Install dep-scout in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
What the publisher says
From the dep-scout repository's README, as published. We do not edit it. Read it on GitHub
dep-scout
先查再造 (research before you build) — an MCP server that stops AI coding agents from reinventing the wheel.
Before an agent writes a feature from scratch, dep-scout searches the right registry — crates.io (Rust), npm (JS/TS/frontend), PyPI (Python), pkg.go.dev (Go), Maven Central (Java/Kotlin) or NuGet (.NET) — for a mature package that already solves the problem, and scores each candidate on reuse quality (popularity, maintenance recency, version stability, metadata) — and flags known security advisories (OSV) and license-compliance risks. The agent then reuses a proven, safe solution instead of hand-rolling buggy code. It can also search the official MCP registry so the agent reuses an existing MCP server instead of building one.
Works with Cursor (and any MCP client) over stdio. No API keys — every data source is a keyless public API.
Why
AI now writes a lot of code — and its worst habit is reimplementing solved problems, picking abandoned libraries, or hallucinating packages. dep-scout turns the best practice "don't build it if a maintained package already does it" into a tool the agent calls automatically, across languages.
Tools
ecosystem accepts aliases: js/ts/javascript/typescript/node/frontend → npm, py/pip → python, golang → go, java/kotlin/gradle/jvm → maven, dotnet/csharp/net → nuget, rs/cargo → rust.
Reuse score (0–100)
(no public download stats) GitHub stars are used as a proxy.
- Popularity (≤40) — downloads normalised to a ~90-day window; for Go/Maven
version sink the score and de-rank the candidate.
- Maintenance (≤30) — how recently the package was updated.
- Stability (≤15) — stable 1.0+ vs 0.x; penalty for pre-releases.
- Metadata (≤15) — repository, docs/homepage, license present.
- Security penalty — known OSV advisories on the resolved
LGPL, MPL, SSPL, BUSL…) are surfaced as compliance warnings.
- License flag — copyleft / commercially-restricted licenses (GPL, AGPL,
- Penalty — latest version yanked (crates/PyPI) or deprecated (npm).
Verdicts: ≥78 ✅ strongly recommend · 58–77 🟡 usable · 38–57 🟠 cautious · <38 🔴 find an alternative.
Ranking blends textual relevance (query-term overlap, exact-name match) with the reuse score and the registry's own ordering, so results are both on-topic and high quality.
Data sources (all keyless)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
dep-scout: common questions
- Is dep-scout MCP server safe?
- Mostly: it is graded B (70/100). Read the dep-scout safety report
- Does dep-scout need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is dep-scout maintained?
- The last commit was 141 days ago (2026-06-16). The latest release is v0.2.0.
- How does dep-scout compare with other MCP servers?
- safety score 70/100 (higher than 35% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers). Full comparison.