1. Conduid
  2. Search
  3. io.github.ofershap/npm-plus
MCP server · Search

io.github.ofershap/npm-plus

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

Unclaimed last commit 7 months ago search
37Low

Scored 6 months ago · breakdown

About io.github.ofershap/npm-plus

io.github.ofershap/npm-plus is an MCP server published by ofershap in the Search category: npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

The repository has 1 stars and 1 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

Claude Code
claude mcp add io-github-ofershap-npm-plus -- npx -y mcp-server-npm-plus
npx
npx -y mcp-server-npm-plus

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (8)

bundle_sizeGet bundle size (minified + gzip) via Bundlephobia

Parameters not published.

compare_downloadsCompare download counts across multiple packages

Parameters not published.

dependency_treeShow direct dependencies as a tree

Parameters not published.

download_trendsDaily breakdown with sparkline

Parameters not published.

downloadsGet download stats for a package

Parameters not published.

package_infoGet detailed info: description, license, repo, dependencies

Parameters not published.

searchSearch npm packages by query

Parameters not published.

vulnerabilitiesGet vulnerability info and advisory links

Parameters not published.

Ask AI

✦

Ask AI about io.github.ofershap/npm-plus

Powered by Claude · Grounded in docs

I know everything about io.github.ofershap/npm-plus. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

mcp-server-npm-plus

npm version npm downloads CI TypeScript

npm package research from your AI assistant. Search packages, check bundle sizes, scan for vulnerabilities, compare download counts, and inspect dependency trees. No API keys needed.

npx mcp-server-npm-plus

Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Uses public npm registry APIs.

MCP server for npm package search, bundle size, and vulnerability scanning

Demo built with remotion-readme-kit

Why

Choosing between npm packages usually means opening a bunch of browser tabs: npm for package info, Bundlephobia for size, Snyk for vulnerabilities, npm trends for download comparisons. This server puts all of that in one place, accessible through your AI assistant. Ask "compare zustand vs jotai vs valtio" and get download numbers, bundle sizes, and dependency counts side by side. Ask "are there any known vulnerabilities in express?" and get the answer without leaving your editor. It uses only public npm APIs, so there's nothing to sign up for.

Tools

Tool Description
search Search npm packages by query
package_info Get detailed info: description, license, repo, dependencies
downloads Get download stats for a package
compare_downloads Compare download counts across multiple packages
bundle_size Get bundle size (minified + gzip) via Bundlephobia
vulnerabilities Get vulnerability info and advisory links
dependency_tree Show direct dependencies as a tree
download_trends Daily breakdown with sparkline

Quick Start

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

VS Code

Use the MCP extension and configure the server with npx mcp-server-npm-plus.

Example Prompts

  • "Search npm for React state management libraries"
  • "What's the bundle size of lodash?"
  • "Compare downloads of zustand vs jotai vs valtio"
  • "Check for vulnerabilities in express"
  • "Show me the dependency tree for next"
  • "What are the download trends for typescript this month?"

Development

npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format

See also

More MCP servers and developer tools on my portfolio.

Author

Made by ofershap

LinkedIn GitHub


README built with README Builder

License

MIT © 2026 Ofer Shapira

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.ofershap/npm-plus

How do I install io.github.ofershap/npm-plus?

Run claude mcp add io-github-ofershap-npm-plus -- npx -y mcp-server-npm-plus, then add the server to your MCP client's configuration.

Is io.github.ofershap/npm-plus safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.ofershap/npm-plus still maintained?

The last commit was 7 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.