Categories › Security › Code & dependency scanning
What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.
Remote server: your requests and data go to vigia.coredls.cloud. Claude Code: claude mcp add --transport http vig-a https://vigia.coredls.cloud/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
package_status — Returns the current state of one package: latest stable version and its publish date, status (active / deprecated / yanked / not_found_in_relist_versions — Lists the published versions of one package, newest first, each with its publish date, a prerelease flag and whether it is withdrawn (npm: dupgrade_impact — Reports what changes between two versions of an npm package by diffing the public TypeScript API of both releases (only the type declarationsymbol_status — Checks whether an exported function, class, type or constant (or a Class.member) exists in a specific version of an npm package, using the pfind_compatible_version — Finds the newest stable, non-withdrawn version of a package whose own declared requirements admit the runtimes you give it: npm engines and version_status — Reports on one exact version of an npm, PyPI, crates.io or Packagist package: whether that version exists, when it was published, whether itcheck_dependencies — Audits a whole manifest in one call. For every dependency in a package.json (dependencies and devDependencies) or a requirements.txt it returecent_changes — Lists the changes Vigia detected recently, newest first: new package releases (with old and new version), deprecations, yanks and removals, model_status — Looks up AI models in the OpenRouter catalog: price per million input and output tokens in USD, context window, maximum output tokens, knowleol_status — Tells whether a language, runtime, framework, database or operating-system version is still supported and when it reaches end of life. Coverchanges_since_cutoff — Returns what happened in software after a given date, so an agent can patch the gap between its training data and today: packages among the find_package — Searches the catalog of tracked packages and AI models by case-insensitive name prefix and returns up to 15 matches ordered by popularity, eNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.