io.github.ofershap/npm-plus
npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
mcp-server-npm-plusclaude mcp add npm-plus -- npx -y mcp-server-npm-plus@1.0.1
{
"mcpServers": {
"npm-plus": {
"command": "npx",
"args": [
"-y",
"mcp-server-npm-plus@1.0.1"
]
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
mcp-server-npm-plus
npm package research from your AI assistant. Search packages, check bundle sizes, scan for vulnerabilities, compare download counts, and inspect dependency trees. No API keys needed.
npx mcp-server-npm-plus
Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Uses public npm registry APIs.
Demo built with remotion-readme-kit
Why
Choosing between npm packages usually means opening a bunch of browser tabs: npm for package info, Bundlephobia for size, Snyk for vulnerabilities, npm trends for download comparisons. This server puts all of that in one place, accessible through your AI assistant. Ask "compare zustand vs jotai vs valtio" and get download numbers, bundle sizes, and dependency counts side by side. Ask "are there any known vulnerabilities in express?" and get the answer without leaving your editor. It uses only public npm APIs, so there's nothing to sign up for.
Tools
| Tool | Description |
|---|---|
search | Search npm packages by query |
package_info | Get detailed info: description, license, repo, dependencies |
downloads | Get download stats for a package |
compare_downloads | Compare download counts across multiple packages |
bundle_size | Get bundle size (minified + gzip) via Bundlephobia |
vulnerabilities | Get vulnerability info and advisory links |
dependency_tree | Show direct dependencies as a tree |
download_trends | Daily breakdown with sparkline |
Quick Start
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"npm-plus": {
"command": "npx",
"args": ["mcp-server-npm-plus"]
}
}
}
Claude Desktop
Add to claude_desktop_config.json:
{
"mcpServers": {
"npm-plus": {
"command": "npx",
"args": ["mcp-server-npm-plus"]
}
}
}
VS Code
Use the MCP extension and configure the server with npx mcp-server-npm-plus.
Example Prompts
- "Search npm for React state management libraries"
- "What's the bundle size of lodash?"
- "Compare downloads of zustand vs jotai vs valtio"
- "Check for vulnerabilities in express"
- "Show me the dependency tree for next"
- "What are the download trends for typescript this month?"
Development
npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format
See also
More MCP servers and developer tools on my portfolio.
Author
README built with README Builder
License
MIT © 2026 Ofer Shapira
Questions fréquentes
Qu'est-ce que io.github.ofershap/npm-plus ?
npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.
Comment installer io.github.ofershap/npm-plus ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add npm-plus -- npx -y mcp-server-npm-plus@1.0.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour io.github.ofershap/npm-plus ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
io.github.ofershap/npm-plus est-il open source ?
Oui. Son code est sur GitHub sous licence MIT.
Qui maintient io.github.ofershap/npm-plus ?
Il est publié par ofershap. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.