MCP server

io.github.4hmetuyar/dependency-auditor

CVE scanning for npm/pip/cargo dependencies via OSV

• Published source
• Repository

Version

0.2.4

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Sends data to outside servers Code that posts data to network addresses.
• Evaluates code at runtime Code that builds and runs code while it executes.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.