io.github.j7an/dep-rank is an MCP server that rank a GitHub repo's dependents by stars or trust heuristic, and search their code. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 61/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"dep-rank": {
"env": {
"DEP_RANK_TOKEN": "ghp_your_token_here"
},
"args": [
"--with",
"dep-rank[mcp]",
"dep-rank",
"mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Rank a GitHub repo's dependents by stars or trust heuristic, and search their code
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'dep-rank' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked dep-rank against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in other
deja-vu: local memory over the session histories of forty-three coding agents.
MCP WordPress Remote proxy server
专门为 agent 打造的 agent 搜索工具,具备多语言搜索能力,覆盖中文/英文/学术/代码/购物/金融/新闻/百科。
Searchable football data provider documentation for AI coding agents. Like Context7 for football data.
MCP Security Weekly
Get CVE alerts and security updates for io.github.j7an/dep-rank and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Rank GitHub dependents by stars or trust.
dep-rank finds the most popular repositories that depend on a given GitHub project. It scrapes GitHub's dependents page, enriches results via the GraphQL API, and works as a command-line tool and as an MCP server for AI agents (see MCP server).
uvx or the ghcr.io/j7an/dep-rank Docker image.Also: JSON output, package download stats, choosing among multiple packages, local cache, Docker image, Python API.
pip install dep-rank
export DEP_RANK_TOKEN=ghp_your_token_here # see Authentication below
dep-rank deps https://github.com/django/django --rows 5
A token is effectively required; see Authentication. Example output (numbers change over time). dep-rank also prints a scrape summary on stderr; this run stopped early, so the count is a lower bound, not a total (see Partial results):
Top dependents of
https://github.com/django/django
┏━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━┓
┃ Repository ┃ Stars ┃
┡━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━┩
│ makeplane/plane │ 61K │
│ scalar/scalar │ 16K │
│ jetify-com/devbox │ 12K │
│ shiaho777/web-to-app │ 7.1K │
│ WeblateOrg/weblate │ 6.1K │
└──────────────────────┴───────┘
178 dependents at or above the star threshold
dep-rank deps — List top dependentsdep-rank deps https://github.com/django/django
dep-rank deps https://github.com/django/django --rows 20 --min-stars 100
dep-rank deps https://github.com/django/django --descriptions --format json
dep-rank deps https://github.com/django/django --packages
| Option | Default | Description |
|---|---|---|
--rows | 10 | Number of results |
--min-stars | 5 | Minimum star count filter |
--format | table | Output format: table or json |
--descriptions | off | Fetch descriptions via GitHub API (requires token) |
--packages | off | Search packages instead of repositories |
--token | DEP_RANK_TOKEN | GitHub token |
--max-pages | 200 | Maximum pages to scrape (ceiling 1000) |
--no-adaptive-stop | off | Disable adaptive early-stop; scrape continues until exhaustion or --max-pages |
--rank-by | stars | Ranking strategy: stars or trust (heuristic, requires token) |
--trust-check | off | Check sampled star history for up to 25 top results (requires --rank-by trust and token) |
--downloads | off | Show each dependent's most-downloaded registry package (ecosyste.ms / deps.dev / npm; display only) |
--package-name | GitHub's default | Scrape only this package (exact name from the dependents page dropdown). Without it, GitHub's default package is scraped and any o |