supply-chain-guard

io.github.homeofe/supply-chain-guard · v6.5.7

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

Description supplied by the publisher in the MCP Registry. We have not tested this server.

Install

npx -y supply-chain-guard mcp

Assembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.

Signals

GitHub stars	7
npm weekly downloads	1,992
Last push	3d ago
Licence	Apache-2.0
Open issues	0
SECURITY.md	Yes
Language	TypeScript
Latest version published	2026-10-14

Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.

Similar servers compare all →

package-guard-mcp

Score 71

Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats.

★ 1↓ 57/wkMITpushed 2d ago

Developer toolsSecurity

projectmem

Score 88

Coding agent memory — one local MCP server for every project. Warns before repeating failed fixes.

★ 865MITpushed 14d ago

Developer tools

UI Beats

Score 78

MCP server for UI Beats. Let your coding agent search, read and install animated React components.

★ 234MITpushed 2mo ago

Developer toolsSearch & web