Dep Oracle
by ertugrulakbencommunityv1.3.0
dep-oracle is a predictive dependency security engine that calculates Trust Scores for every package in your dependency tree, detecting zombie dependencies and predicting future risks before they become vulnerabilities.
From the registry: Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.
Install & configure
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `dep-oracle` MCP server into my current AI client (that's you).
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["dep-oracle","mcp"]
Note: Predictive dependency security engine. CLI ships with an `mcp` subcommand. Optional GITHUB_TOKEN for higher API rate limits is configured via .dep-oraclerc.json, not env.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Note: Predictive dependency security engine. CLI ships with an `mcp` subcommand. Optional GITHUB_TOKEN for higher API rate limits is configured via .dep-oraclerc.json, not env.
Tools (8)
dep_oracle_scan
Full project dependency scan
dep_oracle_trust_score
Trust score for a single package
dep_oracle_blast_radius
Impact analysis for a package
dep_oracle_zombies
List all zombie dependencies
dep_oracle_suggest_migration
Get alternative package suggestions
dep_oracle_typosquat_check
Check typosquatting risk for a package name
dep_oracle_compare
Compare two packages side-by-side
dep_oracle_report
Generate a JSON report, optionally to file
Environment variables
GITHUB_TOKENrequiredGitHub token for higher API rate limitsPackages
dep-oracle
npmv1.3.0transport: stdio
Details
- Language
- TypeScript
- License
- MIT
- Released
- Feb 22, 2026
- Last commit
- Mar 13, 2026
- Registry name
- io.github.ertugrulakben/dep-oracle
Categories
Related Servers
Netdata
Real-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection.
79.8k
Codebase Memory Mcp
Persistent codebase knowledge graph. Survives session restarts and context compaction.
33.8k
Oh My Posh Validator
Validate oh-my-posh configurations and segment snippets against the official schema.
23.1k