All servers · Code & repositories · Security · Health & fitness

Presend dependency checks

io.github.presendapp/presend-deps · v1.0.0

Measured by MCP Station

Description written by the publisher, not verified

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

Connect

claude mcp add --transport http presend-deps https://presend.pages.dev/mcp-deps

{
  "mcpServers": {
    "presend-deps": {
      "url": "https://presend.pages.dev/mcp-deps"
    }
  }
}

Tools as reported by the server

• maintainer_change_check
  Publisher-change analysis is npm only. Also reports whether the package exists (found) and its age (first_published, package_age_days, new_package if first published less than 30 days ago), for npm and for PyPI; on PyPI only existence and age are available. Flags a previously unseen human publisher
• repo_health_check
  Maintenance signals for a GitHub repository given as owner/name: stars, forks, open issues, license, archived and fork flags, creation date and age, days since last push, topics. Use it to judge whether a dependency looks maintained or abandoned. For an npm or PyPI package whose repository you do no
• supply_chain_check
  Call this before installing or adding a package (npm install, pip install, a new entry in a manifest), especially one whose name you recalled or that a model suggested. One-call risk check: combines vulnerability_check (OSV.dev), typosquat_check, maintainer_change_check (npm only) and repo_health_ch
• typosquat_check
  Call before installing a package whose name you typed or recalled. Checks whether an npm or PyPI package name is a near-miss of a well-known package (typosquatting), with an edit-distance threshold scaled to name length; names of 3 characters or fewer are not fuzzy-matched. Uses a curated list of po
• vulnerability_check
  Checks a package (optionally a specific version) against OSV.dev for known vulnerabilities: npm, PyPI, Go, crates.io, Maven, RubyGems, Packagist and NuGet. For npm and PyPI, a name that does not exist returns found: false and vulnerable: null, never a clean result. Use supply_chain_check for a combi

Repository · JSON · Text for agents · Registry updated 2026-10-03