deptrust

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

{
  "mcpServers": {
    "deptrust": {
      "command": "go",
      "args": [
        "run",
        "github.com/clidey/deptrust@latest"
      ]
    }
  }
}

claude mcp add deptrust go run github.com/clidey/deptrust@latest

{
  "mcpServers": {
    "deptrust": {
      "command": "go",
      "args": [
        "run",
        "github.com/clidey/deptrust@latest"
      ]
    }
  }
}