bots.st/depscout
DepScout
Scan lockfiles for known vulnerabilities and malware
520 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 4
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://depscout.salesup.workers.dev/mcp
What it can do
| Tool | What it says it does |
|---|---|
check_dependencies | Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against OSV.dev in one batch. Returns a summary count and only the packages with problems: malicious-package flags first, then vulnerabilities by… |
check_lockfile | Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock.json, npm-shrinkwrap.json, yarn.lock, pnpm-lock.yaml, requirements.txt (== pins), poetry.lock, uv.lock, Pipfile.lock, Cargo.lock, go.sum… |
check_package | Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware advisories), known vulnerabilities with severity and the version that fixes each, the minimum version that clears all of them, the latest… |
get_vulnerability | Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vector, aliases, publish date, the affected packages with their affected and fixed version ranges, and key references. Use when the user… |
In its maker's words
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
- Website
- depscout.salesup.workers.dev
- Publisher
- yc-droid (4 listings in the registry)
- Listed from
- the official MCP Registry as
io.github.yc-droid/depscout - Version
- 1.0.0, updated 7 Oct 2026
- Kinds of work
- Security and trust, Search and research
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 520 ms | |
| Answered | 2286 ms | |
| Answered | 949 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.