freshdeps-mcp (io.github.SolvoHQ/freshdeps-mcp)
The freshdeps-mcp server exposes live npm/PyPI dependency-health verdicts. It enables AI coding agents to check a package before recommending it, addressing the 6–18 month staleness gap found in model training data.
🛠️ Key Features
- Live dependency-health verdicts for npm and PyPI
- Tool:
check_dependency_freshness - Maintenance signal classifications: active / slowing / stale / abandoned / unknown
- Returns: latest version and last release/commit age
- Flags: deprecation, yank, archived
- Known CVE count via OSV
🚀 Use Cases
- Validate package freshness in agent workflows prior to recommendation
- Reduce reliance on stale or known-vulnerable dependencies
⚡ Developer Benefits
- Combines a concise human-readable summary with structured content
- Produces consistent fields: maintenance signal, versions, age, flags, and CVE count
⚠️ Limitations
- Structured outputs include an OSV-based CVE count; exact CVE handling details beyond the provided excerpt are not specified
- Only the
check_dependency_freshnesstool is documented