PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence

Description

Live software supply-chain security engine for developers, engineering teams and AI agents. Query real npm and PyPI registry metadata including latest versions, release activity, version counts, maintenance signals, repositories and licenses; scan exact packages and versions for live vulnerabilities and CVEs through OSV.dev; audit known dependency risk; review license obligations before commercial distribution; and combine live security and maintenance signals into a transparent package risk score. Supports npm and PyPI. No API key required. Free tier: 10 requests/day. Always pin versions, verify advisories and run tests before upgrading.

Community Metrics

Categories

• mcp

Tags

• mcp
• smithery

Capabilities

• remote

Information