mcp-dependency-review
Statically reviews repo-scoped MCP configuration files for mutable package references (like @latest or version ranges) and classifies their drift risk without executing any servers.
Lift—not yet benchmarked
92
Trustsecurity · quality · license · upkeep
Scan Saferisk 0/100
LicenseMITserved via MCP
HEAD:643673c3c2a6 Safe10/15/2026
Update tracking (upstream polling, re-scan, re-benchmark, accept-or-stay-pinned) ships with Phase 4.