1. Conduid
  2. Files
  3. lockvet
MCP server · Files

lockvet

by · github.com/matteo-sung/lockvet

Explain any lockfile change: bumps, new & fixed vulns, release ages, deprecations — 29 formats

Unclaimed files
InstallView source
34Low

Scored 2 months ago · breakdown

About lockvet

lockvet is an MCP server published by matteo-sung in the Files category: explain any lockfile change: bumps, new & fixed vulns, release ages, deprecations — 29 formats.

The repository has 1 stars and 0 forks, with the last commit 9 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/matteo-sung/lockvet

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (6)

auditaudit everything the project pins *right now* — advisories, unlisted versions, deprecations

Parameters not published.

queuetriage every open Dependabot/Renovate PR of a repo/org in one table

Parameters not published.

vet_filesvet two lockfiles or SBOMs on disk

Parameters not published.

vet_gitvet a local repo: working tree vs `HEAD`, or any revision range

Parameters not published.

vet_packagevet a dependency *before* installing it (`npm:left-pad`, `pypi:requests@2.32.0`) — advisories, age, deprecation, typosquat suspicion

Parameters not published.

vet_urlvet any PR/MR, compare range, or commit by URL — GitHub, GitLab, Bitbucket, Gitea/Forgejo, Azure DevOps, no clone

Parameters not published.

Ask AI

✦

Ask AI about lockvet

Powered by Claude · Grounded in docs

I know everything about lockvet. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About lockvet

How do I install lockvet?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is lockvet safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is lockvet still maintained?

Yes — the last commit was 9 days ago. The repository has 1 stars and 0 forks.