Deptrust
未认领deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.
aicligolangjavajavascriptmavenmcpnpmpypiruby
安装
$
npx @clidey/deptrust install工具(3 个)
check_package
Checks a package version and returns known vulnerabilities plus a recommendation.
compare_versions
Compares a current version and target version, including resolved and added vulnerabilities.
suggest_safe_version
Checks the latest version first. If latest is not allowed, checks provider-reported fixed versions first, then older known versions, and suggests the newest version with an allow recommendation.