Freshdeps Mcp
Check npm and PyPI packages for staleness and CVE exposure before your agent recommends or installs them.
Overview
freshdeps-mcp is a MCP server for the Ship phase that delivers live npm and PyPI dependency-health verdicts so agents avoid stale or CVE'd packages.
What is this MCP server?
- Returns live npm and PyPI dependency-health verdicts for agent-chosen packages
- Aims to stop agents from suggesting abandoned or CVE-affected dependencies
- Catalog lists Freshdeps website at freshdeps.vercel.app alongside GitHub source
- Published catalog version 1.0.0 under SolvoHQ freshdeps-mcp
- Covers npm and PyPI per server description
What problem does it solve?
Coding agents often recommend outdated or vulnerable packages because they lack real-time registry health and CVE context.
Who is it for?
Indie devs who let agents edit package.json or requirements and want a quick health gate on npm and PyPI picks.
Skip if: Repos on private registries only, or teams that already enforce exhaustive SCA in CI and do not need agent-time checks.
What do I get? / Deliverables
After you add freshdeps-mcp, your agent can query current dependency-health verdicts before adding or upgrading packages in your repo.
- Live dependency-health verdicts for npm and PyPI candidates
- Agent-grounded package adoption decisions with fewer stale or CVE-prone picks
Recommended MCP Servers
Journey fit
How it compares
Live registry health MCP, not step-by-step semver migration briefs.
Common Questions / FAQ
Who is io.github.SolvoHQ/freshdeps-mcp for?
It is for builders using AI coding agents who add npm or PyPI dependencies and want live staleness and CVE-oriented verdicts at decision time.
When should I use io.github.SolvoHQ/freshdeps-mcp?
Use it in Ship security and Build backend whenever you or your agent evaluates new packages or reviews lockfile changes before merge.
How do I add io.github.SolvoHQ/freshdeps-mcp to my agent?
Install and register freshdeps-mcp from the SolvoHQ GitHub catalog entry in your MCP client, following the host-specific server config for version 1.0.0.