Depsonar runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 28 Oct 2026.
Dependency audits, live CVE scans, migration detection and stack health across 9 languages.
What the code does
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = spawn(process.execPath, [target.entry, ...args], {
const serverIn = (dir) => path.join(dir, 'node_modules', cfg.package, cfg.server);
btn.innerHTML=data.scanning?'<span class="spinner"></span>Scanning...':'⟳ Scan All Projects';
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to Depsonar
same job, measured the same wayLive npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages
Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
Translate text or HTML, detect languages, and list supported languages with Langbly.
Free health AI: drug interaction checks, medicine facts and health questions in 90+ languages
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Code generation from JSON recipes, linked type graphs, and API schemas across 11 languages.
AI code impact analysis — dependency graphs, cascade detection, and build gates for AI agents
Self-hosted code intelligence: cross-repo Q&A, dependency audits and PR review, over MCP
Depsonar — questions
Answers built from our own checks of this server.