io.github.SolvoHQ/freshdeps-mcp
Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages
Install
The installation steps are in the documentation below. Documentation
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
freshdeps-mcp
MCP server exposing live npm / PyPI dependency-health verdicts so AI coding agents can check a package before recommending it — closing the 6–18 month staleness gap in model training data.
Tool
check_dependency_freshness
| Input | Type | |
|---|---|---|
ecosystem | "npm" \ | "pypi" |
package | string |
Returns a concise human-readable summary and structured content:
maintenance signal (active/slowing/stale/abandoned/unknown),
latest version, last release/commit age, deprecation/yank/archived flags,
known CVE count (OSV), and a hand-verified alternative if the package is
dead.
It calls ${FRESHDEPS_API_BASE}/api/verdict (default
https://freshdeps.vercel.app).
Install (Claude Desktop / Cursor)
Once published:
{
"mcpServers": {
"freshdeps": { "command": "npx", "args": ["-y", "freshdeps-mcp"] }
}
}
From this repo (before publish):
{
"mcpServers": {
"freshdeps": {
"command": "node",
"args": ["/absolute/path/to/code/mcp/server.js"]
}
}
}
Run / test manually
npm install
FRESHDEPS_API_BASE=http://localhost:3100 node server.js
The server speaks JSON-RPC over stdio (StdioServerTransport).
Env
| Var | Purpose |
|---|---|
FRESHDEPS_API_BASE | backend base URL (default prod) |
GOATCOUNTER_CODE | optional fire-and-forget usage analytics |
Frequently asked questions
What is io.github.SolvoHQ/freshdeps-mcp?
Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages
How do I install io.github.SolvoHQ/freshdeps-mcp?
Follow the installation steps in its documentation, shown on this page and in its repository.
Is io.github.SolvoHQ/freshdeps-mcp open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.SolvoHQ/freshdeps-mcp?
It is published by SolvoHQ. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.