deps.dev — Google's package metadata + dependency graph API

Assess the risk of an npm package before you install it — deps.dev, OpenSSF Scorecard, socket.dev and Snyk Advisor in one command.

Hold new dependency versions until they age. Supply chain protection via deps.dev.

MCP server for querying package versions across multiple ecosystems using deps.dev API

A configuration to use Animate.css with Tailwind CSS

A configuration to use Animate.css with Tailwind CSS

MCP server that returns a cross-validated dependency FITNESS verdict for npm packages: deprecated / yanked / superseded status plus an inferred safe migration target — what to move to and how confident we are — cross-checked across the npm registry, deps.

Lombok-like decorators and code generation for TypeScript - reduce boilerplate with powerful annotations and Gang-of-Four design patterns

Model-facing library_search tool: free cross-ecosystem (npm/crates.io/Maven/Go/PyPI/RubyGems + GitHub) 'has this already been built?' search — exact-name ranked, stars/downloads as fitness signals, no API key required

Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,

The dependency bloodhound for AI coding agents. Sniffs out vulnerabilities, license risks, and health issues in your dependencies — free, no API keys.

MCP server giving coding agents npm, PyPI and crates.io package health, vulnerability, dependency-graph and download data. Free and zero-config; an optional wallet or a USDC transaction hash unlocks paid consolidated risk scores over x402.

Safety-ranked open-source component discovery across npm, PyPI, crates.io, RubyGems, GitHub and Hugging Face — for humans and AI agents. Ships an MCP server and verified API signatures so agents stop guessing.

A simple, RFC-compliant robots.txt parser

Local dependency intelligence for Go, npm, pnpm, Cargo, Python, Ruby, Maven, Gradle, and NuGet -- in your repo OR inside a container image (lockfiles, Go binaries' embedded module lists, installed node_modules, and Alpine/Debian OS packages via OSV.dev):

the shared development dependencies. required as dependencies here, then in devDeps in a shared project

48-tool MCP server for codebase analysis — dependency graphs, architecture layers, security scanning, refactor plans, git history, and more. Works with GitHub and GitLab repos (cloud + self-hosted) and local directories.

Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more

packages/tira-deps-dev

Finds the mature, battle-tested libraries your AI-written codebase reinvented by hand, grades the dependencies it already has, and reports what is missing. JavaScript, Python, Rust and Go.