1. Conduid
  2. Science
  3. Deptrust
MCP server · Science

Deptrust

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

39Low

Scored 3 months ago · breakdown

About Deptrust

Deptrust is an MCP server in the Science category: deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Install

From source
git clone https://github.com/clidey/deptrust

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Deptrust

Powered by Claude · Grounded in docs

I know everything about Deptrust. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Deptrust

How do I install Deptrust?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Deptrust safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Deptrust still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.