deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.
Latest release v0.15.0 — deptrust v0.15.0 · 22 Oct 2026
3 files for Claude Code, Codex and OpenCode: deptrust-package-check, deptrust AGENTS.md, deptrust CLAUDE.md — 1,309 tokens loaded in every session.
AGENTS.md A 1,305 tok CLAUDE.md A 4 tok .agents/skills/deptrust-package-check/SKILL.md A 86 tok These files are clidey/deptrust's own configuration — they tell Claude Code, Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.