Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Free account. Installing gives you the manifest plus copy-paste snippets.
See reviewsImported from the official MCP registry - entry
io.github.salemalem/npmscanv1.0.0. Ratings and installs below are from this marketplace.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
streamable-http https://npmscan.com/api/mcpSource: https://github.com/salemalem/npmscan
Registry entry: io.github.salemalem/npmscan
Copy one of these into your project. Installing also returns the manifest and these snippets.
# after Install: the listing is in your workspace's routing pool - nothing else to configure
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'
# or pin it on the OpenAI-compatible endpoint: {"model": "mcp-io-github-salemalem-npmscan", ...}An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.
{
"ocm": "1",
"id": "mcp-io-github-salemalem-npmscan",
"kind": "tool",
"name": "NPMScan",
"description": "Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups",
"publisher": "salemalem",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"mcp",
"mcp-server",
"mcp-registry"
],
"languages": [
"en"
],
"supports_tools": true
},
"quality_prior": 0.6,
"examples": [
"Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups"
],
"primary": false,
"metadata": {
"source": {
"provider": "mcp-registry",
"repository": "https://github.com/salemalem/npmscan",
"path": "server.json",
"ref": "1.0.0",
"url": "https://github.com/salemalem/npmscan",
"key": "io.github.salemalem/npmscan",
"registry": "https://registry.modelcontextprotocol.io"
}
},
"endpoints": [
{
"protocol": "mcp",
"url": "https://npmscan.com/api/mcp"
}
]
}Fetch it by URL: GET /api/v1/registry/mcp-io-github-salemalem-npmscan/manifest?version=1.0.0
Star ratings from people who tried it. One review per account; edit yours any time.
No reviews yet. Install it, try it, and be the first to rate it.