salemalem/npmscan-mcp-plugin
A Claude Code plugin that provides read-only npm package and vulnerability lookups via npmscan.com's MCP server.
Collecting fresh signals — velocity needs a few days of history.
collecting data…
star history
This repository contains a TypeScript plugin for Claude Code that connects to npmscan.com’s public MCP server to perform read-only npm package and vulnerability lookups. It is also listed for other AI clients such as ChatGPT, Gemini CLI, Codex, and GitHub Copilot. The plugin focuses on exposing npm supply-chain security data to AI coding assistants.
Frequently asked
- What is salemalem/npmscan-mcp-plugin?
- A Claude Code plugin that provides read-only npm package and vulnerability lookups via npmscan.com's MCP server.
- Is npmscan-mcp-plugin open source?
- Yes — salemalem/npmscan-mcp-plugin is open source, released under the MIT license.
- What language is npmscan-mcp-plugin written in?
- salemalem/npmscan-mcp-plugin is primarily written in TypeScript.
- How popular is npmscan-mcp-plugin?
- salemalem/npmscan-mcp-plugin has 501 stars on GitHub.
- Where can I find npmscan-mcp-plugin?
- salemalem/npmscan-mcp-plugin is on GitHub at https://github.com/salemalem/npmscan-mcp-plugin.