depguard

active

Was I hit by an npm supply-chain attack? Scan every lock file, global install and the npm cache for known-malicious package versions. Pre-install guard, pre-open repo audit, MCP server.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/mopanc/depguard
Package: npm: depguard-cli
Run (stdio): npx -y depguard-cli
The usual command for this package registry; check the repository README for required settings.
License: Apache-2.0
Last update: 2026-11-14
GitHub stars: ★ 15
Homepage: depguard.dev

ai-agents claude-code cli cursor cyclonedx dependency-security devsecops incident-response lockfile malware-detection mcp mcp-server

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.