sonatype/dependency-management-mcp-server
MCP server Claude CodeCodexCursor +2
Sonatype component intelligence: versions, security analysis, and Trust Score recommendations. Remote server at mcp.guide.sonatype.com.
Plugin Claude Code
Sonatype Guide MCP server for software supply chain intelligence and dependency security analysis. Scan dependencies for vulnerabilities, get version recommendations, and check component quality metrics.
Skill Claude CodeCodex
MUST use before installing, adding, or upgrading any dependency. Trigger when: running pip install, npm install, cargo add, go get, or any package manager command; adding a package to requirements.txt, package.json, pyproject.toml, Cargo.toml, go.mod, pom.xml, build.gradle, or Gemfile; choosing which library to use…
sonatype/sonatype-cursor-plugin
Agent
Specialized agent for dependency decisions. Use when evaluating multiple dependency options, comparing alternatives, planning upgrades, or investigating supply chain security issues.
sonatype/sonatype-cursor-plugin
Cursor rule
Proactive dependency guidance when editing package manifests. Suggests security checks before adding or updating dependencies.
sonatype/sonatype-cursor-plugin
Cursor rule
Security-focused dependency selection guidance. Prioritizes secure, well-maintained packages with compatible licenses.
sonatype/sonatype-cursor-plugin
Skill Claude CodeCodex
Comprehensive security audit of all project dependencies. Scans package manifests and reports vulnerabilities, license issues, and quality concerns prioritized by severity.
sonatype/sonatype-cursor-plugin
Skill Claude CodeCodex
Analyze a dependency for vulnerabilities, license issues, and quality metrics using Sonatype Guide. Use when evaluating a specific package before adding it to your project or when investigating a known dependency.
sonatype/sonatype-cursor-plugin
Skill Claude CodeCodex
Find recommended replacement versions for a dependency ranked by Developer Trust Score. Use when upgrading dependencies or looking for more secure alternatives.