← Back to search

@clidey/deptrust

GitHub Actions Scanned 5d ago

Install deptrust, a local package vulnerability checker and MCP server for AI agents.

npm
? Not scanned yet

Versions

0.14.0latest
Jul 28, 2026
0.13.0
Jul 20, 2026
0.12.0
Jul 20, 2026
0.11.0
Jul 20, 2026
0.10.0
Jul 16, 2026
+ show 9 moreshow less
0.9.0
Jul 3, 2026
0.8.0
Jul 3, 2026
0.7.0
Jun 27, 2026
0.6.0
Jun 23, 2026
0.5.0
Jun 23, 2026
0.4.0
Jun 23, 2026
0.3.0
Jun 23, 2026
0.2.0
Jun 23, 2026
0.0.1
Jun 23, 2026

Tools 0

No tools indexed yet.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 9

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%