Is io.github.FlorianBruniaux/dep-scope safe to use?

io.github.FlorianBruniaux/dep-scope has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.FlorianBruniaux/dep-scope?

io.github.FlorianBruniaux/dep-scope supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.FlorianBruniaux/dep-scope do?

io.github.FlorianBruniaux/dep-scope provides 5 tools: scan_project, analyze_package, get_migration_candidates, generate_migration_prompt, find_duplicates. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.FlorianBruniaux/dep-scope?

io.github.FlorianBruniaux/dep-scope is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.FlorianBruniaux/dep-scope actively maintained?

io.github.FlorianBruniaux/dep-scope is recently maintained — last commit was 61 days ago. It has 19 GitHub stars.

io.github.FlorianBruniaux/dep-scope

@florianbruniaux/dep-scope

Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.

19 62/wk 5 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 61d ago

Works with most clients

Transport: stdio, http

5 tools · ~376 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dep-scope": {
      "args": [
        "--package=@florianbruniaux/dep-scope",
        "-y",
        "dep-scope-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-florianbruniaux-dep-scope)](https://mcppedia.org/s/io-github-florianbruniaux-dep-scope)

Read me

What io.github.FlorianBruniaux/dep-scope does

Symbol-level dependency analysis + LLM-ready migration prompts for TypeScript/JavaScript projects.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@florianbruniaux/dep-scope' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @florianbruniaux/dep-scope against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~376 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.FlorianBruniaux/dep-scope safe to use?: io.github.FlorianBruniaux/dep-scope has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.FlorianBruniaux/dep-scope?: io.github.FlorianBruniaux/dep-scope supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.FlorianBruniaux/dep-scope do?: io.github.FlorianBruniaux/dep-scope provides 5 tools: scan_project, analyze_package, get_migration_candidates, generate_migration_prompt, find_duplicates. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.FlorianBruniaux/dep-scope?: io.github.FlorianBruniaux/dep-scope is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.FlorianBruniaux/dep-scope actively maintained?: io.github.FlorianBruniaux/dep-scope is recently maintained — last commit was 61 days ago. It has 19 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.FlorianBruniaux/dep-scope and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dep-scope": {
      "args": [
        "--package=@florianbruniaux/dep-scope",
        "-y",
        "dep-scope-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-florianbruniaux-dep-scope)](https://mcppedia.org/s/io-github-florianbruniaux-dep-scope)

Read me

What io.github.FlorianBruniaux/dep-scope does

Symbol-level dependency analysis + LLM-ready migration prompts for TypeScript/JavaScript projects.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@florianbruniaux/dep-scope' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

dep-scope

Symbol-level dependency analysis + LLM-ready migration prompts for TypeScript/JavaScript projects.

"Knip tells you what's unused. dep-scope tells you how you use what you keep, and generates the prompt to remove it."

When to use dep-scope

Good use cases:

Legacy project audit: Finding lodash functions that now have native equivalents
Library consolidation: Do we really need 3 icon libraries?
Migration: Generate a context-aware prompt and let Claude Code do the refactoring
Curiosity: "Which symbols from this 50KB library do we actually use?"

Not the right tool if:

You just want unused deps → use Knip instead
Your codebase is already well-maintained → dep-scope will mostly say "KEEP"

Quick Example

$ dep-scope scan

═══════════════════════════════════════════
  dep-scope Analysis Report
═══════════════════════════════════════════

Summary:
  Total dependencies: 45
  ✓ Keep:          38
  ↻ Recode Native: 3
  ✗ Remove:        2
  ⊕ Peer Dep:      4

Action Items:
  Remove (unused):
    ✗ moment
    ✗ has-flag

  Recode to native:
    ↻ lodash.debounce (1 symbol) → custom debounce function
    ↻ array-includes (1 symbol) → Array.prototype.includes
    ↻ left-pad (1 symbol) → String.prototype.padStart

How it compares

Feature	Knip	Depcheck	Moderne	dep-scope
Unused detection	✅ Excellent	✅ Good	❌	⚠️ Basic
Config file scanning	✅	✅	❌	✅
Symbol-level analysis	❌	❌	✅	✅
Native alternatives database	❌	❌	✅ (lodash)	✅ 195 packages
e18e micro-utilities coverage	❌	❌	❌	✅
Transitive graph analysis	❌	❌	❌	✅
Monorepo workspace support	⚠️	❌	❌	✅
Duplicate detection	❌	❌	❌	✅
LLM migration prompt	❌	❌	❌	✅
MCP Server (AI editors)	❌	❌	❌	✅
OSS / free	✅	✅	❌ enterprise	✅

Recommendation: Use Knip for unused detection, dep-scope for deeper analysis and migration. They work well together (dep-scope auto-detects Knip if installed).

Installation

CLI (global):

npm install -g @florianbruniaux/dep-scope

Without installation:

npx @florianbruniaux/dep-scope scan

MCP Server (AI editors — no CLI needed):

Add to your editor's MCP config and the server runs on demand via npx. See the MCP Server section below for per-editor config snippets.

From source:

git clone https://github.com/FlorianBruniaux/node-dep-scope.git
cd node-dep-scope
npm install && npm run build && npm install -g .

Quick Start

cd /path/to/your/project

dep-scope init                        # configure dep-scope for your project (interactive)
dep-scope scan                        # full scan
dep-scope scan --root                 # scan full project, including scripts/ tools/ bin/
dep-scope scan --check-duplicates     # include duplicate detection
dep-scope scan --check-transitive     # surface transitive polyfills (e18e database)
dep-scope scan --each-workspace       # monorepo: scan each package individually
dep-scope migrate                     # generate migration prompts for all candidates
dep-scope migrate lodash              # target a specific package
dep-scope report -o ./audit.md   

... [View full README on GitHub](https://github.com/FlorianBruniaux/node-dep-scope#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @florianbruniaux/dep-scope against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~376 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.FlorianBruniaux/dep-scope safe to use?: io.github.FlorianBruniaux/dep-scope has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.FlorianBruniaux/dep-scope?: io.github.FlorianBruniaux/dep-scope supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.FlorianBruniaux/dep-scope do?: io.github.FlorianBruniaux/dep-scope provides 5 tools: scan_project, analyze_package, get_migration_candidates, generate_migration_prompt, find_duplicates. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.FlorianBruniaux/dep-scope?: io.github.FlorianBruniaux/dep-scope is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.FlorianBruniaux/dep-scope actively maintained?: io.github.FlorianBruniaux/dep-scope is recently maintained — last commit was 61 days ago. It has 19 GitHub stars.