package-check

Active

declared in 1.0.0

Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Parameters schema

{
  "type": "object",
  "required": [
    "name"
  ],
  "properties": {
    "eco": {
      "enum": [
        "npm",
        "pypi",
        "go",
        "maven",
        "cargo",
        "rubygems",
        "nuget"
      ],
      "type": "string",
      "description": "Ecosystem, default npm"
    },
    "name": {
      "type": "string",
      "description": "Package name, e.g. express or @scope/pkg"
    },
    "version": {
      "type": "string",
      "description": "Version to check, default latest"
    }
  },
  "additionalProperties": false
}

What this tool wraps· 0 endpoints

min confidence0.70 0.50

No endpoints wrapped at confidence ≥ 0.50.

Parent server

Toolcall

https://github.com/BeneIstvan/toolcall-mcp

1/7 registries

View full server →