Security / Lazaretto

Lazaretto

io.github.jamesdfinance-dev/lazaretto · v1.3.1

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Description supplied by the publisher in the MCP Registry. We have not tested this server.

GitHub repositoryWebsite

Install

npx -y lazaretto-mcp

Assembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.

Offers a hosted remote endpoint: https://lazaretto.dev/mcp (streamable-http). No local install needed.

Signals

GitHub stars1
npm weekly downloads45
Last push1d ago
LicenceMIT
Open issues1
SECURITY.mdNo
LanguageJavaScript
Latest version published2026-11-01

Signals captured from GitHub, npm and the official MCP Registry on November 2, 2026. See the scoring method.

Similar servers

SkillTotal

Score 81

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

★ 16Apache-2.0pushed today
SecurityAI & media

marketnow

Score 82

68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.

★ 1↓ 224/wkMITpushed today
Security

agent-bom

Score 78

AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.

★ 36Apache-2.0pushed today
Security

Five MCP servers worth your time, every week

The Plug Weekly is a free email picked from these scores. About a 3-minute read. Unsubscribe any time.

Subscribe free