Depguard
未认领Audit npm packages for security, maintenance, licenses and dependencies. Recommends install or write-from-scratch.
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio 'depguard' -- 'npx' '-y' 'depguard-cli' 'audit' 'express'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
14 个工具中显示 14 个
文档中列出的工具 (14)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
depguard_audit
Deep dive on one package (vulnerabilities + static code analysis + install scripts)
depguard_audit_bulk
Compare A vs B vs C in one call
depguard_audit_deep
Full transitive tree audit for one package
depguard_audit_project
Audit a whole project — direct deps, transitives via lockfile, packageManager field
depguard_audit_workspace
Just cloned a repo, before opening it in any IDE. Lists files that auto-execute on workspace open (VS Code tasks runOn:folderOpen, devcontainer lifecycle, .envrc, JetBrains run configs, Makefile, .gitattributes, committed git hooks). Defends against fake-interview / take-home-test malware.
depguard_guard
About to install package Y → pre-install verify + audit + allow/warn/block
depguard_remediate
"100 vulnerabilities, which 5 direct deps do I bump?" — groups transitives by parent, sorted by severity weight
depguard_review
AI code review — detect debris left by AI agents (console.logs, empty catch, broken imports, orphan files)
depguard_sbom
Generate a CycloneDX 1.6 SBOM (EU CRA, US EO 14028, SOC 2, FedRAMP)
depguard_score
Score 0-100 for one package
depguard_search
Search npm by keywords, ranked by depguard score
depguard_should_use
Need functionality X → recommend install / use-native / write-from-scratch
depguard_sweep
Find unused dependencies in a project
depguard_verify
AI hallucination guard — does this package exist? Is it a typosquat?