1. Conduid
  2. Security
  3. io.github.rog0x/dep
MCP server · Security

io.github.rog0x/dep

License check, outdated deps, security for AI agents

Unclaimed security
37Low

Scored 6 months ago · breakdown

About io.github.rog0x/dep

io.github.rog0x/dep is an MCP server in the Security category: license check, outdated deps, security for AI agents.

Install

Claude Code
claude mcp add io-github-rog0x-dep -- npx -y @rog0x/mcp-dep-tools
npx
npx -y @rog0x/mcp-dep-tools

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.rog0x/dep

Powered by Claude · Grounded in docs

I know everything about io.github.rog0x/dep. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

mcp-dep-tools

MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities — all from your AI assistant.

Tools

dep_check_licenses

Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.

dep_find_outdated

Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.

dep_analyze_tree

Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.

dep_analyze_size

Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.

dep_security_audit

Check dependencies for known security vulnerabilities. Runs npm audit when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.

Setup

npm install
npm run build

Usage with Claude Desktop

Add to your Claude Desktop config:

{
  "mcpServers": {
    "dep-tools": {
      "command": "node",
      "args": ["path/to/mcp-dep-tools/dist/index.js"]
    }
  }
}

All tools accept a single parameter

  • project_dir (string, required): Absolute path to the project directory containing a package.json.

License

MIT

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.rog0x/dep

How do I install io.github.rog0x/dep?

Run claude mcp add io-github-rog0x-dep -- npx -y @rog0x/mcp-dep-tools, then add the server to your MCP client's configuration.

Is io.github.rog0x/dep safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.rog0x/dep still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.