SocketlistDeveloper tools / NPMScan
NPMScan
io.github.salemalem/npmscan · v3.1.2
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Description supplied by the publisher in the MCP Registry. We have not tested this server.
Offers a hosted remote endpoint: https://npmscan.com/api/mcp (streamable-http). No local install needed.
Signals
| GitHub stars | 509 |
| npm weekly downloads | - |
| Last push | today |
| Licence | MIT |
| Open issues | 2 |
| SECURITY.md | Yes |
| Language | TypeScript |
| Latest version published | 2026-10-10 |
Signals captured from GitHub, npm and the official MCP Registry on November 2, 2026. See the scoring method.
Similar servers compare all →
Octocode MCP - AI Context Platform
Score 88AI code research platform. Search, analyze, and extract insights from any GitHub repository.
Package Health
Score 76Is this dependency still maintained? Scores npm, PyPI packages and GitHub repos 0-100.
Five MCP servers worth your time, every week
The Plug Weekly is a free email picked from these scores. About a 3-minute read. Unsubscribe any time.