Freshdeps MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 15 May 2026.
Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages
Today is the operative word: we check Freshdeps MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Dependency policy and MCP server to stop AI coding agents from installing risky npm packages.
Package alive? Verdict with evidence: deprecated, archived, stale or active; plus runtime EOL dates.
Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Is this dependency still maintained? Scores npm, PyPI packages and GitHub repos 0-100.
npm, PyPI & crates.io health, vulns and dependency graphs. Runs locally, no API key.
Pre-install verdicts for npm packages: GO, RISKY, FAKE, or MISSING. Built for humans and AI agents.
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Answers built from our own checks of this server.