FlorianBruniaux/node-dep-scope

github
github analyzed a7d5db5

Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.

maintainer
FlorianBruniaux
licence
—
first seen
2026-06-03
last seen
2026-06-03
releases · 30d
0
github stars
19 reported
short id

FlorianBruniaux/node-dep-scope is an MCP server distributed on github, maintained by FlorianBruniaux, tracked here since June 2026. It has shipped 0 releases and exposes 5 tools. Tools include analyze_package, find_duplicates, generate_migration_prompt, get_migration_candidates, scan_project. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 5 tools appear to reach filesystem, shell / exec, network and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-14: 5 tools added and 5 tools removed.

full security breakdown →

tools

5
  • analyze_package
  • find_duplicates
  • generate_migration_prompt
  • get_migration_candidates
  • scan_project

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.