Dep Oracle
Score npm dependencies for trust, zombie risk, and blast radius before you ship or add packages during build.
Overview
Dep Oracle MCP is a MCP server for the Ship phase that delivers predictive npm dependency trust scores, zombie detection, and blast radius analysis inside your agent.
What is this MCP server?
- Predictive dependency security engine for npm ecosystems
- Trust scores, zombie detection, and blast radius analysis
- npm package dep-oracle v1.3.0 with stdio MCP transport
- Node runtime hint for local MCP registration
- Agent-invokable views for supply-chain decisions in ship phase
- npm identifier dep-oracle version 1.3.0
- stdio transport with Node runtime hint
- Engine themes: trust scores, zombie detection, blast radius analysis per server description
What problem does it solve?
One questionable npm package can silently expand your attack surface, but solo builders lack time for deep supply-chain review on every add.
Who is it for?
Indie JS/TS builders who want MCP-driven dependency risk checks during releases and when agents propose new packages.
Skip if: Non-npm stacks, teams that only need passive CI CVE scanning with no interactive agent workflow, or orgs without Node for local MCP.
What do I get? / Deliverables
You get agent-accessible trust, zombie, and blast-radius signals to block or refactor risky dependencies before they reach production.
- Trust-oriented readouts on npm dependencies
- Zombie or low-viability package signals for triage
- Blast-radius context to prioritize remediation before release
Recommended MCP Servers
Journey fit
How it compares
Predictive supply-chain MCP engine, not a generic code formatter or cloud deploy integration.
Common Questions / FAQ
Who is Dep Oracle MCP for?
Solo and small-team developers shipping npm-based apps who want security-oriented dependency intelligence inside MCP-enabled agents.
When should I use Dep Oracle MCP?
Before shipping, when evaluating new dependencies during build, or when revisiting critical packages after maintainer or incident news.
How do I add Dep Oracle MCP to my agent?
Install the dep-oracle npm package, configure stdio MCP with Node per server.json v1.3.0, and register it in Claude Code, Cursor, Codex, or a compatible client.