depscope

A package management Swiss Army knife that wraps dependency operations into MCP tools. You get 20 operations including typosquatting checks, vulnerability scans, version lookups, and migration path recommendations. The most called tools are package existence checks, version resolution, and typosquat detection. It also handles bulk scanning, compatibility checks, and can suggest alternatives when you need to swap out a dependency. Useful when you want Claude to reason about your project's dependencies, check for supply chain risks, or debug version conflicts without leaving the conversation. The tool set covers both investigation tasks like health scores and trust signals plus actionable commands like generating install instructions and pinning strategies.