HomeSecurity › depguard

depguard

Pre-install guardian for npm packages with static code analysis, supply-chain attack detection, vulnerability audit (npm + GitHub Advisory Database), AI hallucination guard, and CycloneDX 1.6 SBOM generation with VEX. 28 MCP tools. Zero runtime dependencies — the SBOM serializer is implemented natively against the public CycloneDX schema.

TypeScript Local macOSWindowsLinux
★ 16 stars Last pushed 2026-09-23 License: Apache-2.0

Topics: Security

Connect

See the repository for installation instructions: https://github.com/mopanc/depguard

Related servers

Listed in punkpeye/awesome-mcp-servers (MIT)