Enterprise DNAEnterprise DNA

MCP Servers

mopanc/depguard

Audit npm packages for security, maintenance, licenses and dependencies. Recommends install or write-from-scratch.

Visit site ↗

Our verdict

Not reviewed yet

We have not reviewed mopanc/depguard yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About mopanc/depguard

A TypeScript CLI tool that audits npm packages for security vulnerabilities, maintenance status, license compliance, and dependency quality. It evaluates each package and recommends whether to install it or write the functionality from scratch.

Best for

Solo developers or small teams needing a quick sanity check on a few npm dependencies

Use cases

  • Auditing a package's security and maintenance health before adding it to a project
  • Checking license compatibility across a project's dependency tree
  • Evaluating whether an external package is worth the risk vs. implementing a custom solution

Notes

12 stars on GitHub. Last updated 2026-06-01. Licensed Apache-2.0.

Pros

  • Focused security and quality audit for npm packages
  • Clear recommendation to install or build custom
  • Open source with a simple command-line interface

Cons

  • Low star count (12) suggests very limited community adoption and testing
  • May lack updates or ongoing maintenance
  • No integration with popular CI/CD workflows out of the box

Key facts

What we have checked

Days since the last commit
0
Checked GitHub
GitHub forks
1
Checked GitHub
GitHub stars
15
Checked GitHub
Days to a first reply on issues
21.7
Checked GitHub
Open issues
19
Checked GitHub
Releases in the last 90 days
3
Checked GitHub

Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.

How to use

How to set it up

As the listing publishes it. We have not run this install.

Install

npx depguard-cli exposure

Tools exposed

  • depguard_exposure
  • depguard_guard
  • depguard_should_use
  • depguard_audit_workspace
  • depguard_audit_project
  • depguard_remediate
  • depguard_audit
  • depguard_audit_bulk
  • depguard_audit_deep
  • depguard_review
  • depguard_sweep
  • depguard_search
  • depguard_score
  • depguard_verify
  • depguard_sbom
  • data-exfiltration
  • code-execution
  • unexpected-behavior
  • supply-chain

Clients the listing names (not checked here)

Claude Desktop, Claude Code, Cursor, Windsurf, Cline, Continue, VS Code

Install

Add mopanc/depguard to your client

Not verified yet

No install recipe yet. We write one for Claude Code, Claude Desktop, Cursor, VS Code, Codex and ChatGPT when the server is in the official MCP registry with a package or remote address we can use.

Until then, follow the project's own README, or the setup the listing publishes under How to set it up.

Works with

What mopanc/depguard connects to

No confirmed connections yet. A product appears here when the server's registry name, repo, homepage or name ties it to that product, and a client appears when we have an install recipe for it.

Stars and usage

How mopanc/depguard is growing

GitHub stars

15 to 15

stars. 29 Oct 2026 to 12 Nov 2026, 3 readings.

Source: GitHub. Checked .

Health and security

Is mopanc/depguard looked after, and what do its setup files show

Health score

51 out of 100

Does someone look after this repository? It does not say the code is good or safe. Worked out from GitHub signals checked . How it is worked out

PartPointsWhat we saw
Recent activity30 of 30Last push 0 days ago
Releases15 of 153 releases in 90 days
Issue replies6.1 of 20First reply in 21.7 days (median)
Maintainer0 of 15Owned by a single user
Official source0 of 20Community server

Security check static checks

100 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked by edna-static-v1 npm:depguard-cli@1.15.2. What it checks

Licence: Apache-2.0

  • Note The lab has not recorded this server's tool list yet, so tool permissions were not checked.

Sources

Where this comes from

  • GitHubRegistry

    Checked · Days since the last commit, GitHub forks, GitHub stars, Days to a first reply on issues, Open issues, Releases in the last 90 days

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.

← Back to MCP ServersSubmit your own entry →