io.github.mrfentmen/dependency-drift-mcp is an MCP server that summarize local dependency manifest and lockfile drift without returning package names,. Its tool list has not been published yet over stdio, requires no API key, and scores 37/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-mrfentmen-dependency-drift-mcp": {
"args": [
"-y",
"dependency-drift-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Summarize local dependency manifest and lockfile drift without returning package names,...
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'dependency-drift-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked dependency-drift-mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in writing
Scrape, crawl, and map websites to Markdown or JSON via local CLI.
Any file → clean Markdown for AI agents: PDF, Office, EPUB, HTML, images, audio/video. Local MCP.
Parse PDFs, images, doc, docx, ppt, pptx, xls, xlsx, html into Markdown using MinerU API.
MCP server for DeepL translation API
MCP Security Weekly
Get CVE alerts and security updates for io.github.mrfentmen/dependency-drift-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.