io.github.rog0x/npm

MCPcommunity
v1.0.1io.github.rog0xUnknownUpdated 3mo agonpmGitHub

npm package search, audit, bundle analysis for AI agents

MCP server providing npm and Node.js package management tools for AI agents. Search the npm registry for packages by keyword. Returns name, description, version, weekly downloads, and last publish date. Get detailed information about a specific npm package: all published versions, dependencies, maintainers, repository URL, license, unpacked size, npm quality/popularity/maintenance scores, and…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
3mo agoLast update
Package
Authorio.github.rog0x
LicenseUnknown
Version1.0.1
Sourcemcp-registry
npm@rog0x/mcp-npm-tools
GitHubrog0x/mcp-npm-tools
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface5 tools · none privileged
Security scan✓ Cleanv1.0.1 · 20d ago
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

MCP server providing npm and Node.js package management tools for AI agents. Search the npm registry for packages by keyword. Returns name, description, version, weekly downloads, and last publish date. Get detailed information about a specific npm package: all published versions, dependencies, maintainers, repository URL, license, unpacked size, npm quality/popularity/maintenance scores, and weekly download count. Analyze a file to find outdated dependencies (compares pinned/range version…

Keywords
mcp