MCP servers tagged dependency-security

3 live MCP servers tagged "dependency-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with dependency-security.

live servers

avg trust

most stars

supply-chain-mcp-server

90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDe…

★ 4

Slopguard

Blocks AI-hallucinated and typosquatted packages before they install — npm, pip, uv, yarn, pnpm, bun

Drift Check

tomelias10

Zero-execution MCP security preflight + GitHub Action. Detect mutable package references before AI agents run them. Try any public repo in the browser.