salemalem / npmscan-mcp-plugin
git clone https://github.com/salemalem/npmscan-mcp-plugin.git
Claude Code plugin giving read-only npm package and vulnerability lookups via npmscan.com's free, unauthenticated MCP server.
Why you might care
Lets Claude check npm packages, dependency vulnerabilities, and supply-chain risk without an API key, using the same public data as npmscan.com. Includes a dependency-audit skill that runs a multi-step audit report, and flags confirmed malware separately from ordinary bugs.
+129
stars, 24h · #310
+~903
stars, 7 days · #273
+~3.9k
stars, 30 days · #240
300
★ total · +903% this week
1
forks · 1 open issues
Star history (as recorded here)
LanguageTypeScript
LicenseMIT
Created2026-08-01 (2mo ago)
Last push1d ago
Watchers0
OwnerUser
GitHub topics
Links
README
Loading README…
Blurb generated by claude-haiku-5-5 today. Star deltas marked ~ are extrapolated from partial history.