Categories › Software Development › Code search, analysis, refactoring & languages
Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.
Remote server: your requests and data go to packages.openkrill.app. Claude Code: claude mcp add --transport http package-health-check https://packages.openkrill.app/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
check_package — Use this when the user asks whether an npm or PyPI package is vulnerable, maintained, deprecated or safe to use, or what license it has: "ischeck_package_json — Use this when the user asks to check their package.json, or the dependencies of a project, for known vulnerabilities: "check my package.jsoncheck_repo_health — Use this when the user asks whether the project behind a package is maintained, abandoned or trustworthy: "is the express repo still maintaisubmit_feedback — Send feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a toget_feedback_reply — Read the maintainers' reply to feedback you sent with submit_feedback, given its ticket id. Returns status pending until a reply is ready, tindex_tools — Search the tools on this server by task or keyword in plain words. Returns the matching tools, best match first, each with its name, title, Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.