The ai.kaiv/dependency-trust MCP server provides trust-checking for software dependencies used by agents. It evaluates dependencies against multiple criteria, including OpenSSF Scorecard, licenses, and CVEs, and reports dependency risk across 7 ecosystems. The server is focused on assessing dependency trustworthiness rather than implementing agent logic.
🛠️ Key Features
- Trust-check dependencies for agents
- Checks: OpenSSF Scorecard, licenses, CVEs
- Coverage across 7 ecosystems
🚀 Use Cases
- Validate third-party dependencies before using them in agents
- Identify license and vulnerability risks in dependency sets
- Perform consistent trust checks across multiple ecosystems
⚡ Developer Benefits
- Consolidates multiple trust signals (Scorecard, licenses, CVEs)
- Helps standardize dependency evaluation across 7 ecosystems
⚠️ Limitations
- Scope is limited to dependency trust-checking (no broader agent functionality is described)