safedep/vet

Protect against malicious open source packages 🤖

About the project

vet is a software supply-chain security tool that examines open-source packages for malware, vulnerabilities, license issues, and policy violations. Developers use it to scan package manifests, repositories, container images, or SBOMs and to enforce security policies in CI/CD systems.

This repository also configures its own agents. See what vet tells them →

Open on GitHub safedep.io

1.1kStars on the repository

6Mods indexed here, across every type

yesterdayLast push, which is what freshness is scored on

Apache-2.0Licence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 2 mods

vet-mcp

01

MCP server Cursor

One of 2 in mcp.json

MCP server "vet-mcp" as configured in safedep/vet. Runs in Docker (ghcr.io/safedep/vet:latest).

not rated 1.1k +2 changed 1mo ago A tokens not measured original Apache-2.0

pinner-mcp-stdio-server

02

MCP server Cursor

One of 2 in mcp.json

MCP server "pinner-mcp-stdio-server" as configured in safedep/vet. Runs in Docker (ghcr.io/safedep/pinner-mcp:latest).

not rated 1.1k +2 yesterday A tokens not measured original Apache-2.0