Calculate meta-vulnerabilities from package security advisories

[libxmljs2](https://www.npmjs.com/package/libxmljs2) has critical, unresolved security issues, ([CVE-2024-34393](https://github.com/advisories/GHSA-mjr4-7xg5-pfvh), [CVE-2024-34394](https://github.com/advisories/GHSA-78h3-pg4x-j8cv)), but is no longer mai

Trazum core: priced advisories for LLM prompts (caching, model tier, batching, schemas), plus deterministic trimming, token counting and pricing.

Client for the NSP advisories API

US Travel Advisories MCP.

Extension-only Weavatrix MCP for preview-gated graph sync, advisories, malware review, and remote architecture contracts.

Maritime safety report for the boat's current position: NOAA tsunami bulletins graded against where you are, earthquakes, cyclones, marine forecast, health and travel advisories. Free sources, no API key. Early release, not a substitute for official warni

Scan your lockfile for known malicious npm packages (DataDog keyv campaign, Shai-Hulud, axios supply-chain, TeamPCP, OSV MAL advisories).

Your smart and friendly interactive assistant for dependency updates, security advisories, and cleanup.

First-party Vetch middleware for Vercel AI SDK 6.x - schema v2 events, local energy/carbon/cost estimates, advisories, and Edge-compatible emission.

Audit package-manager security settings and advisories across monorepos and folders of projects. Supports npm, pnpm, yarn, bun, uv, cargo, and bundler.

Pi extension that loads GitHub security advisories into the agent context

DataNexus MCP — Live CVE detail + EPSS exploitation probability + OSV advisories in one call. No repo, no code access, no setup. SBOM vulnerability scanning, licence compliance, supply-chain risk across any package ecosystem. Also: domain RDAP, nonprofit

Scrape the GitHub Advisory Database (GHSA) — security advisories mapped to CVEs, affected packages, version ranges, CVSS and CWE. Filter by ecosystem (npm, pip, maven...) and severity. Official keyless API. Schedule as a dependency-vulnerability monitor.

Verify npm packages before your AI coding agent installs them: hallucinated and typosquatted names, advisories, API drift and version conflicts. MCP server, CLI and agent skill for Claude Code, Cursor and VS Code.

Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.

Meterian MCP server — security advisories for open-source dependencies

A strict malware gate for pnpm installs, powered by OSV malicious-package advisories.

tar for node

A wrapper around yarn audit that fixes many issues