Server data from the Official MCP Registry
Dependency Updater Ai MCP server. Tools: check outdated, suggest updates, security audit. Bu...
Dependency Updater Ai MCP server. Tools: check outdated, suggest updates, security audit. Bu...
The server has a critical unverified external dependency (`auth_middleware`) that is imported from a hardcoded path outside the project, creating a severe supply chain and code injection risk. Additionally, the dependency injection mechanism for authentication is unclear and not self-contained. The server implements rate-limiting and basic API key validation, but these controls depend on an external, untrusted module. String-based manifest replacement in `suggest_updates()` is naive and error-prone. While the vulnerability database and version parsing are reasonable, the overall architecture fails fundamental security principles. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
6 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-dependency-updater-ai-mcp": {
"args": [
"-y",
"dependency-updater-ai-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
Installation · Docs · Report Bug
pip install dependency-updater-ai-mcp
# or
npm install -g @meok-ai/dependency-updater-ai-mcp
See the project repository for full documentation and examples.
MIT © CSOAI
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.