io.github.weiseer/cve-cache

Name: io.github.weiseer/cve-cache
Rating: 60 (1 reviews)
Author: io.github.weiseer

MCPcommunity

v0.1.1io.github.weiseerUnknownUpdated 1mo agonpm GitHub

Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

Recent CVE + GHSA cache as a stdio MCP server. Probe P-005 by weiseer. Cached, structured snapshot of recent CVE + GitHub Security Advisory records — for AI agents auditing dependencies or screening new packages. — full record for one CVE/GHSA ID — all CVEs affecting a package by ecosystem (npm/PyPI/Cargo/Maven/Go) — recent high-severity CVEs (default: 7-day, CVSS ≥ 7) — counts by severity bucket…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

1mo agoLast update

Package

Authorio.github.weiseer

LicenseUnknown

Version0.1.1

Sourcemcp-registry

npm@weiseer/cve-cache-mcp

GitHubweiseer/cve-cache-mcp

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/25

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/10

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

—npm provenance (Sigstore)+0/5

→ Publish from GitHub Actions with the --provenance flag

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface4 tools · none privileged

Security scan✓ Cleanv0.1.1 · 20d ago

EvalsNone

IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

mcp