1. Conduid
  2. Files
  3. Supplyscan
MCP server · Files

Supplyscan

· github.com/undont/supplyscan

scan JavaScript lockfiles to detect supply chain vulnerabilities and known exploits

Unclaimed climcpsecurity-scannersupply-chain-security
InstallView source
34Low

Scored a month ago · breakdown

About Supplyscan

Supplyscan is an MCP server in the Files category: scan JavaScript lockfiles to detect supply chain vulnerabilities and known exploits.

Install

From source
git clone https://github.com/undont/supplyscan

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (4)

supplyscan_checkCheck single package@version

Parameters not published.

supplyscan_refreshUpdate IOC database from upstream sources

Parameters not published.

supplyscan_scanScan project directory for compromises and vulnerabilities

Parameters not published.

supplyscan_statusScanner version, IOC database info, supported lockfiles

Parameters not published.

Ask AI

✦

Ask AI about Supplyscan

Powered by Claude · Grounded in docs

I know everything about Supplyscan. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Supplyscan

How do I install Supplyscan?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Supplyscan safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Supplyscan still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.