About Package Health Check
Package Health Check is an MCP server for checking npm or Python packages and package.json files. It helps developers assess vulnerabilities and maintenance status; the server is public, read-only, and requires no key.
Key features
- 01Check npm packages
- 02Check Python packages
- 03Analyze package.json
- 04Assess vulnerabilities and upkeep
Use cases
- 01Review project dependency risks
- 02Assess package maintenance status
MCP support
It provides package health checks to MCP clients. The server is public, read-only, and requires no key.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://packages.openkrill.app/mcpclaude mcp add --transport http app-openkrill-packages https://packages.openkrill.app/mcp{"mcpServers":{"app-openkrill-packages":{"type":"http","url":"https://packages.openkrill.app/mcp"}}}Open in Cursor{"servers":{"app-openkrill-packages":{"type":"http","url":"https://packages.openkrill.app/mcp"}}}Open in VS Code{"mcpServers":{"app-openkrill-packages":{"type":"http","url":"https://packages.openkrill.app/mcp"}}}{"mcpServers":{"app-openkrill-packages":{"serverUrl":"https://packages.openkrill.app/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
5| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | Yes | Public package name, such as "lodash", "@types/node" or "requests" |
| version | string | No | Exact version, such as "4.17.15". Omit to check the latest. |
| ecosystem | enum | No | npm for JavaScript packages (the default), pypi for Python packagesnpm | pypi |
Details
From the project READMEDeveloper and Security Checks
Package health, CVE triage, software end-of-life and licence facts, DESIGN.md lint and diff, and AI coding agent news.
claude plugin install dev-security@openkrill
| Skill and MCP server | Tool | Endpoint |
|---|---|---|
packages | Package Health Check | https://packages.openkrill.app/mcp |
cve | CVE Risk Check | https://cve.openkrill.app/mcp |
dev-facts | Dev Facts Check | https://devfacts.openkrill.app/mcp |
design-md | DESIGN.md Linter & Extractor | https://designmd.openkrill.app/mcp |
industry-pulse | Industry Pulse | https://pulse.openkrill.app/mcp |
agent-trace | Agent Trace Check | https://agenttrace.openkrill.app/mcp |
injection-scan | Prompt Injection Scanner | https://injectionscan.openkrill.app/mcp |
Every server is public, read-only and needs no key. Generated from the Agent Tools plugin listings; edits made here are overwritten.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.