mcpField
D
Dependency Freshness Checker

Dependency Freshness Checker

Local
github.com/ArmigerousDeveloper Tools0Updated 20w ago

About Dependency Freshness Checker

Dependency Freshness Checker is an MCP service for coding agents that checks npm and PyPI packages against public registries. It returns version status, deprecation information, and dated, cited changes between a specified version and the latest release.

Key features

  1. 01Latest version and release date
  2. 02Deprecation and version lag checks
  3. 03Dated change summaries
  4. 04Field-level source citations
  5. 05Batch package checks

Use cases

  1. 01Check dependencies before generating code
  2. 02Review package updates before upgrading
  3. 03Verify whether an assumed version is deprecated

MCP support

Exposes the `check_dependency_freshness(packages)` tool to MCP clients. It can be reached through Apify's hosted MCP server, its own Streamable-HTTP endpoint, or local stdio.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
"mcpServers": {
"dependency-freshness": {
"command": "npx",
"args": [
"-y",
"dependency-freshness-mcp"
]
}
}
}
Run commandnpx -y dependency-freshness-mcp

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmdependency-freshness-mcp

Tools

1

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
packagesarrayYesPackages to check. Each: { ecosystem: "npm"|"pypi", name, currentVersion? }. currentVersion is the version you are assuming/about to use — supply it to get the "behind by N / changed since" diff.

Details

From the project README

Dependency Freshness Checker — is your npm or PyPI dependency outdated? Latest version, deprecation & breaking-change MCP for AI agents

Dependency Freshness Checker tells any AI coding agent whether an npm or PyPI package is outdated (out of date) — and gives the cited facts to prove it: the latest version, release dates, deprecation status, how many versions behind you are, and a dated "what changed since your version" breaking-change diff. It is MCP-native, reads only public registries and GitHub releases (no scraping, no ToS risk), and is priced Pay-Per-Event for pay-as-you-go agent use.

What does Dependency Freshness Checker do?

Give it any npm or PyPI package — optionally with the version your agent is assuming — and the Dependency Freshness Checker returns, citations-first:

  • the latest published version and its release date;
  • whether the package (or your assumed version) is deprecated;
  • how many versions behind you are; and
  • a dated, cited changeSummary[] of what changed between your version and latest.

Every field carries a source URL and access date, so an agent can trust — and quote — the result.

Why check npm & PyPI dependency freshness?

LLM coding agents are time-blind: their training is frozen, so they emit 70–90% deprecated package code. Coding agents are the largest agent population, and they all share this blind spot. The Dependency Freshness Checker fixes the frozen-training-cutoff problem at call time. It lives in the proven-demand "freshness for agents" lane but stays narrow and legally clean — it reads only public npm, PyPI, and GitHub releases — so it does not fight first-party RAG browsers or funded incumbents.

How to use the Dependency Freshness Checker

Pass a small list of packages. Defaults are kept low so a first run is cheap, fast, and succeeds:

{
  "packages": [
    { "ecosystem": "npm", "name": "zod", "currentVersion": "3.22.0" },
    { "ecosystem": "pypi", "name": "fastapi" }
  ]
}

currentVersion is optional — omit it to just ask "what's latest?". See .actor/input_schema.json for the full schema.

Output — dated, cited freshness results

Each result includes isOutdated, versionsBehind, latest + latestPublishedAt, a dated changeSummary[], and field-level citations[]. The same shape is returned by a batch run and by the MCP tool, so agents and dashboards consume one format.

Using Dependency Freshness Checker as an MCP tool for AI agents

This Actor exposes one MCP tool, check_dependency_freshness(packages). Three ways to reach it (mechanics cited in docs/research/50-mcp.md):

  • A — Hosted, no setup. Every public Apify Actor is callable through Apify's hosted MCP server at https://mcp.apify.com — no extra wiring.

  • B — The Actor as its own MCP server (Standby). The deployed Actor serves a Streamable-HTTP MCP endpoint at /mcp on its own stable URL:

    {
      "mcpServers": {
        "dependency-freshness": {
          "url": "https://<user>--dependency-freshness-mcp.apify.actor/mcp",
          "headers": { "Authorization": "Bearer <APIFY_TOKEN>" }
        }
      }
    }
    
  • C — Local stdio (dev / MCP Inspector). Build, then point any MCP client at the compiled entrypoint:

    {
      "mcpServers": {
        "dependency-freshness": {
          "command": "node",
          "args": ["/abs/path/dependency-freshness-mcp/dist/mcp/stdio.js"],
          "env": { "GITHUB_TOKEN": "ghp_… (optional, raises GitHub rate limit)" }
        }
      }
    }
    

    Inspect locally with npx @modelcontextprotocol/inspector node dist/mcp/stdio.js.

Pricing

The Dependency Freshness Checker uses Pay-Per-Event pricing, built for pay-as-you-go agent use: a small flat fee per run start plus $0.005 per package checked ($5 / 1,000) — inside Apify's recommended $1–10 / 1,000-results band. You only pay for packages actually checked.

FAQ

Does it scrape websites? No. It reads only public registry APIs and GitHub releases — no scraping, no terms-of-service risk.

Which ecosystems are supported? npm and PyPI today.

Do I need a GitHub token? No — it is optional and only raises the GitHub rate limit for heavier batches.

Can an agent call it directly? Yes — that is the point. Use the check_dependency_freshness MCP tool (option A or B above).

Other Actors

More agent-native data Actors are on the way on the Apify Store. Follow the author profile to see new freshness-for-agents tools as they ship.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.