deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.
Last commit October 9, 2026, 33 days ago.
61 GitHub stars and 0 Honeystax upvotes. Copy the install, test the workflow, then decide if it earns a permanent slot.
You can test this quickly and remove it cleanly if it misses.
Starts at 6. Added: last commit 33 days ago +7, GitHub health 37/100 +22, no security policy +8, no contributing guide +4, no code of conduct +3.
AI Agent
Universal
Model
Multiple
Fastest way to find out if deptrust belongs in your setup.
Copy the install command, run a real test, and back it out cleanly if it slows you down.
claude mcp add deptrust -- npx deptrustRun this first. You will know quickly if the workflow earns a permanent slot.
claude mcp remove deptrustNo messy cleanup loop. If it misses, remove it and keep moving.
Install Location
~/ └─ .claude.json └─ mcp_servers/ └─ deptrust ← registers here
deptrust is listed on Honeystax as a MCP Server for Universal, since July 23, 2026. Its code is at github.com/clidey/deptrust, with 61 GitHub stars and 0 open issues. Last commit October 9, 2026, 33 days ago. GitHub's community health check gives it 37 out of 100.
Source: GitHub repository
Source check: October 9, 2026
Upstream commit: October 9, 2026
Repository state: Not marked archived
Honeystax upvotes are community interest signals, not star ratings. GitHub stars and repository health are source measurements; editorial risk and trial-cost notes are Honeystax analysis.