ai.kaiv/dependency-trust

up checked 2026-11-11T03:38:21.103Z

Unclaimed · Unverified

Publisher-provided description

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

Summary by lookupd

Lets agents check dependency trust by pulling licenses, CVE advisories, dependency graphs, version history, and OpenSSF Scorecard health.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http dependency-trust https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d

Codex, remote (streamable-http)

codex mcp add dependency-trust --url https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "dependency-trust": {
      "url": "https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

get_advisory Get a security advisory (vulnerability) by its key. Returns a security advisory by key, for example a GHSA id taken from a version's advisoryKeys, including th
get_dependencies Get the resolved dependency graph for one package version. Returns the full resolved dependency graph (direct and indirect) for a version. Each node has the de
get_package List every version of a package and whether each is deprecated. Returns all published versions of a package with publish date, the default-version flag, and de
get_package_version Get license, security advisories, and source links for one package version. Returns detailed metadata for a single version: SPDX licenses, security advisoryKey
get_project_health Get a project's OpenSSF Scorecard security posture and maintenance signals. THE trust check. Returns supply-chain trust signals for a package's source reposito

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/ai.kaiv/dependency-trust.svg)](https://lookupd.com/servers/ai.kaiv/dependency-trust)