solvohq avatar

Freshdeps Mcp

solvohq/freshdeps-mcp

Solves the problem of AI agents recommending outdated or vulnerable npm and PyPI packages by exposing a single tool, check_dependency_freshness, that hits a live verdict API. You pass it an ecosystem and package name, and it returns maintenance status (active, slowing, stale, abandoned), latest version, release recency, deprecation flags, CVE counts from OSV, and hand-curated alternatives for dead packages. Closes the 6 to 18 month gap between when a package dies and when the model's training cutoff reflects it. Install via npx or point at the repo. Speaks JSON-RPC over stdio and supports custom API backends via environment variables.

tool
1
last updated
May 15, 2026

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

check_dependency_freshnessReturns a concise human-readable summary and structured content covering maintenance signal, latest version, last release/commit age, deprecation/yank/archived flags, known CVE count (OSV), and a hand-verified alternative if the package is dead.

Returns a concise human-readable summary and structured content covering maintenance signal, latest version, last release/commit age, deprecation/yank/archived flags, known CVE count (OSV), and a hand-verified alternative if the package is dead.

No parameter schema in public metadata yet.

Sponsors

Readme

freshdeps-mcp

MCP server exposing live npm / PyPI dependency-health verdicts so AI coding agents can check a package before recommending it — closing the 6–18 month staleness gap in model training data.

Tool

check_dependency_freshness

InputType
ecosystem"npm" | "pypi"
packagestring

Returns a concise human-readable summary and structured content: maintenance signal (active/slowing/stale/abandoned/unknown), latest version, last release/commit age, deprecation/yank/archived flags, known CVE count (OSV), and a hand-verified alternative if the package is dead.

It calls ${FRESHDEPS_API_BASE}/api/verdict (default https://freshdeps.vercel.app).

Install (Claude Desktop / Cursor)

Once published:

{
  "mcpServers": {
    "freshdeps": { "command": "npx", "args": ["-y", "freshdeps-mcp"] }
  }
}

From this repo (before publish):

{
  "mcpServers": {
    "freshdeps": {
      "command": "node",
      "args": ["/absolute/path/to/code/mcp/server.js"]
    }
  }
}

Run / test manually

npm install
FRESHDEPS_API_BASE=http://localhost:3100 node server.js

View the full README on GitHub

Details

Repository
github.com/solvohq/freshdeps-mcp
Website
freshdeps.vercel.app
Category
Security & Pentesting
Registry
MCP registry, active

More from solvohq

Related Security & Pentesting MCP servers

View all
1sophiacave avatarMCP Shieldsophiacave/mcp-shieldSecurity scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.0stars
2srotzin avatarHive Cdnsrotzin/hive-mcp-cdnEdge content delivery for autonomous agents — signed manifests, A2A authentication0stars
3symbioticsec avatarMcpsymbioticsec/mcpSymbiotic CLI MCP Server for security scanning and analysis0stars
4unbearabledev avatarGitHub Actions Auditunbearabledev/github-actions-auditGitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.0stars
5unbearabledev avatarKubernetes Manifest Auditunbearabledev/k8s-manifest-auditkube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.0stars
6wyre-technology avatarAbnormal Securitywyre-technology/abnormal-mcpMCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.0stars