salemalem/npmscan-mcp-plugin
MCP server
Can I trust it?
No red flags in our checks.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence OK
MIT: you can use it for free, also in a commercial product. Keep the licence notice.
Quick checks from public data. They help, but they are no guarantee.
What it is
A Claude Code plugin that adds an MCP server giving Claude read-only lookups of npm packages and vulnerabilities via npmscan.com's public, unauthenticated API. It also provides skills for dependency audits, package trust checks, dependency evaluation, incident response and CI…
Who it's for
Developers and security-minded engineers using Claude Code who want to audit npm dependencies and check package trust
How to use it
Add it to Claude or Cursor
It's an MCP server: you add it to your AI assistant's settings. Its README explains the exact setup.
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up salemalem/npmscan-mcp-plugin in my project. Follow its README: https://github.com/salemalem/npmscan-mcp-plugin. Explain each step and check it is safe before running anything.
Star curve
On the radar
Its place among the radar's top 100, day by day, with #1 at the top. Gaps are days it was out of the top 100.
Records
- Best place on RepoAlerts: #75, on 26 Oct 2026
Alternatives
Similar projects named in its profile. Each link searches the directory.
Get alerts for repos like this
We'll email you when something in AI agents starts rising. Free, once a week, only what matches.
20,856 GitHub repos watched and ranked every hour. Figures as of 26 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/salemalem/npmscan-mcp-plugin?ref=badge)Similar repos
- NPMscan/npmscan-action
A GitHub Action that scans pull requests changing package.json or lockfiles for known vulnerabilities and malware, new install scripts, repointed lockfile tarballs, and changed overrides. It posts a P
- EpicGames/unreal-engine-skills-for-claude-code-plugin
Claude Code plugin that connects Claude to a running Unreal Editor through an MCP server, exposing hundreds of editor tools across 30+ toolsets such as actors, blueprints, materials, Niagara, Control
- YeonwooSung/my-claude-code-mods
A collection of custom Claude Code mods (plugins) covering session profiling, context analysis, loop detection, verification, scope checks, dependency changes and related workflow aids. Mods are insta
- anthropics/claude-plugins-official
A curated, Anthropic-managed marketplace directory of plugins for Claude Code, split into internal plugins maintained by Anthropic and third-party plugins from partners and the community. Installation
- AgriciDaniel/claude-seo
A free open-source plugin for Claude Code that runs SEO audits on a website, covering technical SEO, E-E-A-T content quality, Schema.org structured data, AI search visibility (GEO), agent readiness, l
- luongnv89/claude-howto
A structured, example-driven guide to Claude Code covering slash commands, memory, skills, hooks, MCP servers, subagents and plugins. It includes Mermaid diagrams, copy-paste configs and templates, an