Install payload
Install payload is broadly covered in current results.
91% (10/11)
Browse the directory
/
Showing 11 resources for "dependencies"
Saved
/ search · [ ] view density · esc clear input
Active
Source-backed filter active — add entries to compare trust side by side.
Trust snapshot
11 results in this view
Claimed
0%(0/11)
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Most at-risk entries in this view
Adoption queue
Browse adoption queue · balanced
1/11 visible results are in hold tier and need mitigation before adoption.
ready 0caution 10hold 1
/dependency-risk-review - Dependency Risk Review Command for Claude Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/dependency-risk-review · trust review · confidence 67%
Claude Plugin Dependency Governance Capability Pack Skill
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/claude-code-plugin-dependency-governance-capability-pack · trust review · confidence 67%
CodeDB MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codedb-mcp-server · trust review · confidence 67%
CodeGraphContext MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codegraphcontext-mcp-server · trust review · confidence 67%
FastAPI-MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/fastapi-mcp · trust review · confidence 67%
Letta
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/letta · trust review · confidence 67%
Lockfile Provenance Checker - Claude Code Hook
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/lockfile-provenance-checker · trust review · confidence 67%
OSV Dependency Risk Statusline
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
statuslines/osv-dependency-risk-statusline · trust review · confidence 67%
Decision confidence
Decision confidence scan · balanced
1/11 results are low-confidence and need review before adoption.
high 0medium 10low 1
/dependency-risk-review - Dependency Risk Review Command for Claude Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
commands/dependency-risk-review · trust review
Claude Plugin Dependency Governance Capability Pack Skill
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/claude-code-plugin-dependency-governance-capability-pack · trust review
CodeDB MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codedb-mcp-server · trust review
CodeGraphContext MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codegraphcontext-mcp-server · trust review
FastAPI-MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/fastapi-mcp · trust review
Letta
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
tools/letta · trust review
Lockfile Provenance Checker - Claude Code Hook
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/lockfile-provenance-checker · trust review
OSV Dependency Risk Statusline
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
statuslines/osv-dependency-risk-statusline · trust review
Freshness distribution
Current results are broadly fresh
Median age 54 days; all 11 scanned entries are within 90 days.
Theme distribution
Themes are broadly spread across this view
42 distinct themes with no dominant one. Most common: security, dependencies, developer-tools.
- security45% (5)
- dependencies36% (4)
- developer-tools27% (3)
- capability-pack18% (2)
- claude-code18% (2)
- supply-chain18% (2)
- agents9% (1)
- api9% (1)
42 distinct themes across 11 scanned
CodeDB MCP Serverby justrach · submitted by oktofeesh1
Code intelligence MCP server with a Zig core for local project indexing, structural outlines, symbol lookup, search, dependency graphs, snapshots, remote public-repo queries, and fallback edits.
FastAPI-MCP Serverby Tadata · submitted by oktofeesh1
FastAPI-native package that exposes FastAPI endpoints as Model Context Protocol tools while preserving schemas, docs, and existing authentication dependencies.
Snyk MCP Server for Claudeby Snyk · submitted by oktofeesh1
Official Snyk Studio MCP Server for connecting Claude Code, Codex CLI, Cursor, Gemini CLI, and other local MCP clients to Snyk Code, Open Source, IaC, container, SBOM, AI-BOM, package-health, authentication, and secure-at-inception workflows.
Slash command that reviews the supply-chain risk of a project's dependencies using OpenSSF Scorecard health signals rather than CVE counts.
Claude Code statusline that reads OSV-Scanner JSON results and prints a compact dependency vulnerability count for review sessions.
Syftby Anchore · submitted by oktofeesh1
Apache-2.0 CLI and Go library from Anchore for generating SBOMs from container images, filesystems, directories, files, archives, and OCI layouts in SPDX, CycloneDX, and Syft JSON formats.
Expert Renovate review skill for evaluating dependency upgrade PRs, package rules, lockfile changes, grouping, automerge, and release readiness.
Open-source platform for stateful agents with long-term memory, Letta Code local CLI agents, hosted Letta API agents, Python and TypeScript clients, skills, subagents, custom tools, MCP dependencies, and persistent agent state.
CodeGraphContext MCP Serverby CodeGraphContext · submitted by oktofeesh1
MCP server and CLI toolkit that indexes local code into a graph database so Claude can query functions, call chains, dependencies, and repository structure.
PostToolUse hook that inspects an edited npm package-lock.json for supply-chain provenance risk rather than known CVEs — dependencies resolved from outside the public npm registry (git, alternate-registry, or insecure transports) and registry tarballs missing an integrity hash.
Expert Claude Claude Code plugin dependency governance capability pack for designing, reviewing, and rolling out Claude Code plugin dependency governance with source-backed checklists, production rules, and privacy-safe output contracts.