Patchwire

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

Install

Remote server: your requests and data go to patchwire.monowire.dev. Claude Code: claude mcp add --transport http patchwire https://patchwire.monowire.dev/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

• get_advisories — Check npm packages for security advisories. Start here before installing, upgrading or deploying: send 1 to 50 package names (never versions
• get_advisory — Read one advisory in full by id: CVE, GHSA, MAL or Patchwire id, any case, aliases resolve. Returns its ranges, fixed versions, exploit cond
• latest_safe — Find the version to upgrade to for one npm package. Returns, per release line (major, or minor for 0.x), the version that fixes every known
• list_feed — List the latest advisories across every tracked stack, newest first, without a package list. Filter by sector (js, stack, ai, crypto) and se
• get_platform_bulletins — Get the security bulletins and announced changes of hosting and data platforms, which are not npm packages and never show in a lockfile: Ver

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• ponytail-audit 190,451 ★
  Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
• ponytail-debt 190,451 ★
  Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
• security-and-hardening 117,221 ★
  Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
• deal-with-security-advisory 113,505 ★
  Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
• html-ppt-knowledge-arch-blueprint