{"_id":"@cyanheads/osv-advisory-mcp-server","_rev":"16-9ac740092b9eaf97222dfeb3b39a2497","name":"@cyanheads/osv-advisory-mcp-server","dist-tags":{"latest":"0.1.15"},"versions":{"0.1.0":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.0","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.0","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"6e15a58afe8d6a5e90bf22584d724686e8e18b19","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.0.tgz","fileCount":45,"integrity":"sha512-q0vvQYfAWG6PHqz/AiweTPqtiM2loghvHOuqfjZHnapEuicbsr0DaDdf39PA1lbjddEHxd9EoRQgZMlFKCNV3A==","signatures":[{"sig":"MEQCIAg2tuy0cxTaq/EK1ij04uKJ3NDi4TeoVGxf0Z/lTjcdAiAnywxKYpnIpr9Fm0rzGtUDR78WOtAqtykGZXY0OkywQA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":186958},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.3.0","node":">=24.0.0"},"gitHead":"5fab47c856a5a9d7dc3c2148af5bae5b115095ce","mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"11.12.1","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"26.0.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.9.16"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.0","depcheck":"^1.4.7","tsc-alias":"^1.8.16","typescript":"^5.9.3","@types/node":"^25.6.0","@biomejs/biome":"^2.4.7"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.0_1780150002175_0.38054642760186486","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.1","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.1","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"9e96cb42c6deb375e3964bc191ee253ccbdbfc4f","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.1.tgz","fileCount":46,"integrity":"sha512-MasN9rxjkR4cwNqPxZ54/czHPWgYJmzAB9oJgqbao8w38gGa++9Zj0nTXq6nr2vDRPGI3bjjpWd/FbCX0rHmiA==","signatures":[{"sig":"MEUCIQDiK7dcbUDeM/yiQgtktksd+Zp+Vw5nOiuxeuSM/w9mzgIgER86ZXo6r5DBN9zcqlWPjZwwK4zdX1FcsJM1kp8JNJs=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":187953},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"9e96cb42c6deb375e3964bc191ee253ccbdbfc4f","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-MasN9rxjkR4cwNqPxZ54/czHPWgYJmzAB9oJgqbao8w38gGa++9Zj0nTXq6nr2vDRPGI3bjjpWd/FbCX0rHmiA==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.9.16"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.0","depcheck":"^1.4.7","tsc-alias":"^1.8.16","typescript":"^5.9.3","@types/node":"^25.6.0","@biomejs/biome":"^2.4.7"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.1_1780193745385_0.2783674568291721","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.2","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.2","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"2ef851058019b5154ec69d2f28d1c53cacbdc021","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.2.tgz","fileCount":43,"integrity":"sha512-5DBuR9QRmUq97gEd+GsEakA85JJmE/z2REoxauAUZXq7KnAmIzH1FJN8w9Q0SnsUAk+SZTQi6vMmOsxSlG9/VQ==","signatures":[{"sig":"MEQCIG5u/OdiS4KBcfcJ3k/O7TuH52jA0mA2dr0ZJYfYKkEMAiA5BPm/gJ9GJKp564pLbLhGkKpC5HjLSMnyIDkU1FkTEQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":181802},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"2ef851058019b5154ec69d2f28d1c53cacbdc021","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-5DBuR9QRmUq97gEd+GsEakA85JJmE/z2REoxauAUZXq7KnAmIzH1FJN8w9Q0SnsUAk+SZTQi6vMmOsxSlG9/VQ==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.9.16"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.0","depcheck":"^1.4.7","tsc-alias":"^1.8.16","typescript":"^5.9.3","@types/node":"^25.6.0","@biomejs/biome":"^2.4.7"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.2_1780284182996_0.07308892959313362","host":"s3://npm-registry-packages-npm-production"}},"0.1.3":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.3","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.3","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"9bdd1a58d6d84361771102980d6fc4e9839440bc","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.3.tgz","fileCount":44,"integrity":"sha512-bT88wanJlmg2TRJyR8uHFKMryW9TZFoCwzXjjLBtnEhUb2U5RC/Z466OqlmhOonf4JBZBY4R6Fnf8xePupuzQQ==","signatures":[{"sig":"MEYCIQCK5A++WF04cR9HnQv+SKKRhCReW8n+UYgegFih2rhKTwIhAJ1+cF1e6+ojbOY0M7aGR+hA/oH0LBeDUWEMKn3mpcil","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":182890},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"9bdd1a58d6d84361771102980d6fc4e9839440bc","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-bT88wanJlmg2TRJyR8uHFKMryW9TZFoCwzXjjLBtnEhUb2U5RC/Z466OqlmhOonf4JBZBY4R6Fnf8xePupuzQQ==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.9.21"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.8","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^5.9.3","@types/node":"^25.9.1","@biomejs/biome":"^2.4.16"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.3_1780411782700_0.31694542964973227","host":"s3://npm-registry-packages-npm-production"}},"0.1.4":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.4","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.4","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"53443ba0800791c46175eb62d7757238764af9aa","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.4.tgz","fileCount":45,"integrity":"sha512-vAxUbh3unUfmCyXPVnc7Ew6VbJOD1nhUd32sSrn/FyQTFX/IimvFjUMz9VnzL7iHYYDSecN1gmID8fmNA+JHoA==","signatures":[{"sig":"MEUCIH9xonRhmi8GsHWygvlAJCj42jgmSQxX/D5bvY0gTx/VAiEAzU7WtU2sfRwNsOYSdhsNxHFnfaNKPfRksW7YkQK2UT4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":184365},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"53443ba0800791c46175eb62d7757238764af9aa","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-vAxUbh3unUfmCyXPVnc7Ew6VbJOD1nhUd32sSrn/FyQTFX/IimvFjUMz9VnzL7iHYYDSecN1gmID8fmNA+JHoA==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.9.21"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.8","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^5.9.3","@types/node":"^25.9.1","@biomejs/biome":"^2.4.16"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.4_1780566089662_0.9297359952474817","host":"s3://npm-registry-packages-npm-production"}},"0.1.5":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.5","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.5","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"01db82464c841708d08ad6a852112ca89b48b6e8","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.5.tgz","fileCount":46,"integrity":"sha512-+9aIzkNZ1WEH9n0TxlgkF21muj3HvVkPtL7KMz+wo1WYtUR34fDu4VGXTg0yqbgjvrmuHgOR+qZcWa86MgXM9g==","signatures":[{"sig":"MEQCIAhsoUIi5j2JamyUG2CuTJYrQgzGYGXw8QQIetD2lyX3AiAn8E/Z7suiwe0Ud3C+qiyjoRkvhF0gM0QZe+6O5tMiaA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":186332},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"01db82464c841708d08ad6a852112ca89b48b6e8","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-+9aIzkNZ1WEH9n0TxlgkF21muj3HvVkPtL7KMz+wo1WYtUR34fDu4VGXTg0yqbgjvrmuHgOR+qZcWa86MgXM9g==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.6"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.8","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^6.0.3","@types/node":"^25.9.3","@biomejs/biome":"^2.5.0"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.5_1781321687698_0.9523088223366096","host":"s3://npm-registry-packages-npm-production"}},"0.1.6":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.6","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.6","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"b88fb0aa4583422ddc7fabda3e9def43acfa25ac","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.6.tgz","fileCount":47,"integrity":"sha512-DsoK93AHII94YtXhfv3a85fpV0jKW35q6X2AzMQydW+bydVzFytaHGCUv0feFD6isoOS6chD6DxKJFHF251lOw==","signatures":[{"sig":"MEUCIG23q2zUymR9nCzYnfKzfVpSbQutyBPdPgfej3Wt3HXbAiEA5TzHjHP3XKe2SwE5362ImZ799pHxiEtWQiHk+/n431w=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":188531},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"b88fb0aa4583422ddc7fabda3e9def43acfa25ac","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-DsoK93AHII94YtXhfv3a85fpV0jKW35q6X2AzMQydW+bydVzFytaHGCUv0feFD6isoOS6chD6DxKJFHF251lOw==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.9"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.9","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^6.0.3","@types/node":"^26.0.0","@biomejs/biome":"^2.5.0"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.6_1781977947692_0.8285026119424594","host":"s3://npm-registry-packages-npm-production"}},"0.1.7":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.7","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.7","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"de132f8a2a494877dd8f5efd320d6fd310f54a1b","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.7.tgz","fileCount":48,"integrity":"sha512-cSpSDA14SDTdULLFvfPxKRpQ4h/1BipO00LAn6zXQz0LL0w5W0HMugse+mZFAOenebQNZkmMpcjkkzmUgt84Ug==","signatures":[{"sig":"MEYCIQCZ899XNlK7x0VPLrv+KlmP9UtyXkp0t0X8Ycq/l21wsQIhAJO5FRsuN2feoRzRjhb1VKYDHZG86XGlGI80DyRD1Mbt","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":187556},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"de132f8a2a494877dd8f5efd320d6fd310f54a1b","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-cSpSDA14SDTdULLFvfPxKRpQ4h/1BipO00LAn6zXQz0LL0w5W0HMugse+mZFAOenebQNZkmMpcjkkzmUgt84Ug==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.9"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.9","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^6.0.3","@types/node":"^26.0.1","@biomejs/biome":"^2.5.1"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.7_1782849616533_0.06675394349694619","host":"s3://npm-registry-packages-npm-production"}},"0.1.8":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.8","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.8","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"19ee037a59145b8d44d30b4b74c31034c27f740d","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.8.tgz","fileCount":53,"integrity":"sha512-8iz8ySpY9dPCQa9VAjMKIYVX76p5ZBf1bZgjHK8n0ODfIM2J1T9Xbs7VQVl/XIHZIa+3NO2nJ0BD9i4cY24NVg==","signatures":[{"sig":"MEYCIQChNdcKZauoE26iMsPiJsdqqElrWCx3niBY8yZV5gg77AIhAJlZ1yn9fd/j9V4qgk5Qep0TkH59IDxLK4Axv4HbdAH1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":197605},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"19ee037a59145b8d44d30b4b74c31034c27f740d","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-8iz8ySpY9dPCQa9VAjMKIYVX76p5ZBf1bZgjHK8n0ODfIM2J1T9Xbs7VQVl/XIHZIa+3NO2nJ0BD9i4cY24NVg==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.10"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.9","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^6.0.3","@types/node":"^26.0.1","@biomejs/biome":"^2.5.1"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.8_1782852034136_0.6841540918790538","host":"s3://npm-registry-packages-npm-production"}},"0.1.9":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.9","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":{"url":"https://caseyjhand.com","name":"Casey Hand","email":"casey@caseyjhand.com"},"license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.9","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"47ae86c12ba4df2771eab5247ecd33e526f248ce","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.9.tgz","fileCount":54,"integrity":"sha512-Q2/miM+0P+cRwInPXRUq4nLGHvrJx9yRDjggXVS3IFizqfH2BxZj1WTUoTeGeiedtpHOSTIfnZRBajIIrQ9S0Q==","signatures":[{"sig":"MEUCIQCH78ZwFbcrWS2u4wWHK+hAXDzRFWuAZmXDFxOXqzMUpAIgax/DAyagNl62KV0jAVSD+rJf/h72Y+BDkisjRgBtMA0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":198655},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"47ae86c12ba4df2771eab5247ecd33e526f248ce","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-Q2/miM+0P+cRwInPXRUq4nLGHvrJx9yRDjggXVS3IFizqfH2BxZj1WTUoTeGeiedtpHOSTIfnZRBajIIrQ9S0Q==","repository":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.10"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.9","depcheck":"^1.4.7","tsc-alias":"^1.8.17","typescript":"^6.0.3","@types/node":"^26.0.1","@biomejs/biome":"^2.5.1"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.9_1782852912539_0.2526595610778797","host":"s3://npm-registry-packages-npm-production"}},"0.1.10":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.10","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.10","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"d703d4e59ab10bb8ed3a9a02d17250b8c61b1167","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.10.tgz","fileCount":55,"integrity":"sha512-8BIPRWg1zim2ZEmKhymLgEsOm3RsVJOnIB0HhnK3Cv8ZfkMOeHzFyxfugMQzpn4E/VWd4lnvcYrZTF0JXzb/nA==","signatures":[{"sig":"MEQCICfWhr/XkfbiQRsivdzL54j9bnn+YG20LJBFyey1lHjkAiBxcWUQqePKlWzDWXRINclxYPQoRBzpaIv/aCDG4RgRAg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":205137},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"d703d4e59ab10bb8ed3a9a02d17250b8c61b1167","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-8BIPRWg1zim2ZEmKhymLgEsOm3RsVJOnIB0HhnK3Cv8ZfkMOeHzFyxfugMQzpn4E/VWd4lnvcYrZTF0JXzb/nA==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.14"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.3.14","devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.10","depcheck":"^1.4.7","tsc-alias":"^1.9.0","typescript":"^6.0.3","@types/node":"^26.1.1","@biomejs/biome":"^2.5.3","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.10_1783787252768_0.1876874503717869","host":"s3://npm-registry-packages-npm-production"}},"0.1.11":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.11","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.11","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"810e99e59927d779787cbc3ecd6a3ef3e1945e56","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.11.tgz","fileCount":56,"integrity":"sha512-PdYG0J+wktCCO9Bt6psvowWisKl+IWdRrnB+tAWga/QbTkaFew52iFt/3Di2teKqcaGjZmWVjDZBO6Kp2fSHaA==","signatures":[{"sig":"MEYCIQD2ukqRAUFZSpc/aFs7NO6/fgo1gtWcutx4/8C9kQjhXAIhAKqXaqXwoYMKU8rzVfL6iBd0NA/LornZBw/0+21tM7jI","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":227958},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"810e99e59927d779787cbc3ecd6a3ef3e1945e56","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-PdYG0J+wktCCO9Bt6psvowWisKl+IWdRrnB+tAWga/QbTkaFew52iFt/3Di2teKqcaGjZmWVjDZBO6Kp2fSHaA==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.14"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.3.14","devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.10","depcheck":"^1.4.7","tsc-alias":"^1.9.0","typescript":"^6.0.3","@types/node":"^26.1.1","@biomejs/biome":"^2.5.3","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.11_1783791804761_0.17280359763936004","host":"s3://npm-registry-packages-npm-production"}},"0.1.12":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.12","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.12","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"6f9e069e717eea11c8be9cd565c204f7f1a38c0b","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.12.tgz","fileCount":57,"integrity":"sha512-fTKXNHVHvYKQGSJfnKFJMfeegtbcpwglv1dZ0+xyuvDUqzJEY+rlrC2PwNsKoP02LdeW50FbeGT7GSt8rZa9jg==","signatures":[{"sig":"MEQCIExig6Sdzx5GMUhjx0O6hRig2vFFdRfqdQXE1YIKwChHAiArp0A9eNWCuNxwzWPWGmuyq1lETTxAPECLpFMmcGoYtA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":233260},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"6f9e069e717eea11c8be9cd565c204f7f1a38c0b","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"bunx vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-fTKXNHVHvYKQGSJfnKFJMfeegtbcpwglv1dZ0+xyuvDUqzJEY+rlrC2PwNsKoP02LdeW50FbeGT7GSt8rZa9jg==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"24.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.10.14"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.3.14","devDependencies":{"ignore":"^7.0.5","vitest":"^4.1.10","depcheck":"^1.4.7","tsc-alias":"^1.9.0","typescript":"^6.0.3","@types/node":"^26.1.1","@biomejs/biome":"^2.5.3","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.12_1783801445214_0.2071057415920754","host":"s3://npm-registry-packages-npm-production"}},"0.1.13":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.13","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.13","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"a688fe641c289f3d1e092f7f6dfd1baeb2c5d056","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.13.tgz","fileCount":58,"integrity":"sha512-MJsIkd31lQcKE7iVNkJFXien9cNNpj6Dot2XrvH+9rRIo2XP7OObZ/ctvW2a7/FaZwJPOHSXou+nkTvfo77TCw==","signatures":[{"sig":"MEUCIEzBAoGhh0NfU67dRKtaF3JZx1r3khNDZcVizZJGDrQyAiEAuIHUID/rRfEOi1B+NFB8wushzjDEZaqgIqHglzBmTHM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":238002},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"a688fe641c289f3d1e092f7f6dfd1baeb2c5d056","engines":{"bun":">=1.3.0","node":">=24.0.0"},"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-MJsIkd31lQcKE7iVNkJFXien9cNNpj6Dot2XrvH+9rRIo2XP7OObZ/ctvW2a7/FaZwJPOHSXou+nkTvfo77TCw==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"26.3.0","dependencies":{"zod":"^4.4.3","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.12.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.4.0","devDependencies":{"ignore":"^7.0.6","vitest":"^4.1.11","depcheck":"^1.4.7","tsc-alias":"^1.9.2","typescript":"^7.0.2","@types/node":"^26.2.0","@biomejs/biome":"^2.5.10","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.13_1787626528203_0.6436085092919175","host":"s3://npm-registry-packages-npm-production"}},"0.1.14":{"name":"@cyanheads/osv-advisory-mcp-server","version":"0.1.14","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","_id":"@cyanheads/osv-advisory-mcp-server@0.1.14","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"bin":{"osv-advisory-mcp-server":"dist/index.js"},"dist":{"shasum":"aa63c4cb44ad621144fd6bb80c8dd1fe633dbe01","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.14.tgz","fileCount":59,"integrity":"sha512-AHbIV3mGZ3lFYkt3snf2ykDO/0JPSWgKcDZNHixEcfiPHaF/Z4FQ5EO7j3B1CDEnCuDzHqcDU3s/pZGCTfB2ng==","signatures":[{"sig":"MEUCICbSBeQGaWoU9Z0UElIiYxtLMZG/agvPm0R/zQqJ7KG3AiEAmvYc7QNnYJCIVFRBjOLx7spr6SR/XkFhklmT7We+/6Q=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCICYHdX1L+ChcrePM+eGCDImQz54orMmUW7PJ5tc63UL3AiBSGeCApxRKwAQeFgnnrJlnHFQDt/aqQZIINkcAEzAy2A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":251040},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","shasum":"aa63c4cb44ad621144fd6bb80c8dd1fe633dbe01","engines":{"bun":">=1.4.0","node":">=24.0.0"},"funding":[{"url":"https://github.com/sponsors/cyanheads","type":"github"},{"url":"https://www.buymeacoffee.com/cyanheads","type":"buy_me_a_coffee"}],"mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","audit:fix":"bun audit fix","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check"},"_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"_integrity":"sha512-AHbIV3mGZ3lFYkt3snf2ykDO/0JPSWgKcDZNHixEcfiPHaF/Z4FQ5EO7j3B1CDEnCuDzHqcDU3s/pZGCTfB2ng==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"_nodeVersion":"26.3.0","dependencies":{"zod":"^4.6.5","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.13.6"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.4.0","devDependencies":{"ignore":"^7.0.9","vitest":"^5.0.1","depcheck":"^1.4.7","tsc-alias":"^1.9.5","typescript":"^7.0.2","@types/node":"^26.6.1","@biomejs/biome":"^2.5.14","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"tmp":"tmp/osv-advisory-mcp-server_0.1.14_1789917640280_0.26944032864756773","host":"s3://npm-registry-packages-npm-production"}},"0.1.15":{"_id":"@cyanheads/osv-advisory-mcp-server@0.1.15","bin":{"osv-advisory-mcp-server":"dist/index.js"},"bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"dist":{"shasum":"a6228a27aea48421906330c08be6fa9ae0673f43","tarball":"https://registry.npmjs.org/@cyanheads/osv-advisory-mcp-server/-/osv-advisory-mcp-server-0.1.15.tgz","fileCount":72,"integrity":"sha512-h72Xy9oqtk0nL3B9cHwQypvGPkdyN5jDTis6R8qYjRBJDdf1AUBEl5E4eS/vWqrVuUv/R/nA6vnVo48ocJu28w==","signatures":[{"sig":"MEYCIQDOX/8xN+5CFqJd8gnyKNUTsNGw8/bVdOE1FZCgblju5AIhAMAW5QHPkeWW2ubwiBh28n4RbRw2tObmXu3jzj4vsyiN","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQC2Xbq3eLYj/JHCm9t4lAoczVg3Ub+EbKcnpGfDU2mbhQIgWH705C9ag+HuaAfTmrDNwERJrJjNtC4ChVTuoyP6b9I="}],"unpackedSize":296074},"main":"dist/index.js","name":"@cyanheads/osv-advisory-mcp-server","type":"module","types":"dist/index.d.ts","author":"Casey Hand (https://caseyjhand.com)","shasum":"a6228a27aea48421906330c08be6fa9ae0673f43","engines":{"bun":">=1.4.0","node":">=24.0.0"},"funding":[{"url":"https://github.com/sponsors/cyanheads","type":"github"},{"url":"https://www.buymeacoffee.com/cyanheads","type":"buy_me_a_coffee"}],"license":"Apache-2.0","mcpName":"io.github.cyanheads/osv-advisory-mcp-server","scripts":{"test":"vitest run","tree":"bun run scripts/tree.ts","build":"bun run scripts/build.ts","clean":"bun run scripts/clean.ts","start":"bun ./dist/index.js","bundle":"bun run build && npx -y @anthropic-ai/mcpb pack . dist/osv-advisory-mcp-server.mcpb && bun run scripts/clean-mcpb.ts dist/osv-advisory-mcp-server.mcpb","format":"biome check --write .","rebuild":"bun run scripts/clean.ts && bun run scripts/build.ts","devcheck":"bun run scripts/devcheck.ts","lint:mcp":"bun run scripts/lint-mcp.ts","audit:fix":"bun audit fix","start:http":"MCP_TRANSPORT_TYPE=http bun ./dist/index.js","list-skills":"bun run scripts/list-skills.ts","publish-mcp":"mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish","start:stdio":"MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js","audit:refresh":"rm -f bun.lock && bun install && bun audit","format:unsafe":"biome check --write --unsafe .","lint:packaging":"bun run scripts/lint-packaging.ts","release:github":"bun run scripts/release-github.ts","changelog:build":"bun run scripts/build-changelog.ts","changelog:check":"bun run scripts/build-changelog.ts --check","check:ecosystems":"bun run scripts/check-ecosystems.ts"},"version":"0.1.15","_npmUser":{"name":"cyanheads","email":"casey@caseyjhand.com"},"homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"_integrity":"sha512-h72Xy9oqtk0nL3B9cHwQypvGPkdyN5jDTis6R8qYjRBJDdf1AUBEl5E4eS/vWqrVuUv/R/nA6vnVo48ocJu28w==","repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"_npmVersion":"10.8.3","description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","directories":{},"maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"_nodeVersion":"26.3.0","dependencies":{"zod":"^4.6.5","pino-pretty":"^13.1.3","@cyanheads/mcp-ts-core":"^0.13.6","@turingpointde/cvss.js":"^2.1.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"packageManager":"bun@1.4.0","devDependencies":{"ignore":"^7.0.9","vitest":"^5.0.1","depcheck":"^1.4.7","tsc-alias":"^1.9.5","commonmark":"^0.31.2","typescript":"^7.0.2","@types/node":"^26.6.2","@biomejs/biome":"^2.5.14","@types/commonmark":"^0.27.10","@socketsecurity/bun-security-scanner":"^1.1.2"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/osv-advisory-mcp-server_0.1.15_1790272532887_0.09565361943454209"}}},"time":{"created":"2026-05-30T14:06:41.986Z","modified":"2026-09-24T17:55:33.165Z","0.1.0":"2026-05-30T14:06:42.343Z","0.1.1":"2026-05-31T02:15:45.536Z","0.1.2":"2026-06-01T03:23:03.168Z","0.1.3":"2026-06-02T14:49:42.893Z","0.1.4":"2026-06-04T09:41:29.840Z","0.1.5":"2026-06-13T03:34:47.853Z","0.1.6":"2026-06-20T17:52:27.840Z","0.1.7":"2026-06-30T20:00:16.664Z","0.1.8":"2026-06-30T20:40:34.298Z","0.1.9":"2026-06-30T20:55:12.699Z","0.1.10":"2026-07-11T16:27:32.903Z","0.1.11":"2026-07-11T17:43:24.951Z","0.1.12":"2026-07-11T20:24:05.347Z","0.1.13":"2026-08-25T02:55:28.344Z","0.1.14":"2026-09-20T15:20:40.361Z","0.1.15":"2026-09-24T17:55:32.993Z"},"bugs":{"url":"https://github.com/cyanheads/osv-advisory-mcp-server/issues"},"author":"Casey Hand (https://caseyjhand.com)","license":"Apache-2.0","homepage":"https://github.com/cyanheads/osv-advisory-mcp-server#readme","keywords":["mcp","mcp-server","model-context-protocol","typescript","bun","stdio","streamable-http","osv","osv-dev","vulnerability","advisory","security","cve","sbom","dependency-audit","devsecops"],"repository":{"url":"git+https://github.com/cyanheads/osv-advisory-mcp-server.git","type":"git"},"description":"Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.","maintainers":[{"name":"cyanheads","email":"casey@caseyjhand.com"}],"readme":"
\n

@cyanheads/osv-advisory-mcp-server

\n

Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.\n

4 Tools
\n

\n
\n\n
\n\n[![Version](https://img.shields.io/badge/Version-0.1.15-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/osv-advisory-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^2.0.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/osv-advisory-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/osv-advisory-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^7.0.2-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.4.0%2B-blueviolet.svg?style=flat-square)](https://bun.sh/)\n\n
\n\n
\n\n[![Install in Claude Desktop](https://img.shields.io/badge/Install_in-Claude_Desktop-D97757?style=for-the-badge&logo=anthropic&logoColor=white)](https://github.com/cyanheads/osv-advisory-mcp-server/releases/latest/download/osv-advisory-mcp-server.mcpb) [![Install in Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en/install-mcp?name=osv-advisory-mcp-server&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkBjeWFuaGVhZHMvb3N2LWFkdmlzb3J5LW1jcC1zZXJ2ZXIiXX0=) [![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=for-the-badge&logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect?url=vscode:mcp/install?%7B%22name%22%3A%22osv-advisory-mcp-server%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22%40cyanheads%2Fosv-advisory-mcp-server%22%5D%7D)\n\n[![Framework](https://img.shields.io/badge/Built%20on-@cyanheads/mcp--ts--core-67E8F9?style=flat-square)](https://www.npmjs.com/package/@cyanheads/mcp-ts-core)\n\n
\n\n
\n\n**Public Hosted Server:** [https://osv-advisory.caseyjhand.com/mcp](https://osv-advisory.caseyjhand.com/mcp)\n\n
\n\n---\n\n## Overview\n\nVulnerability data from OSV.dev, the open-source vulnerability database. Query a single package version, batch-audit a full dependency list or SBOM, and fetch complete advisory records with CVSS severity, CVE aliases, and affected version ranges. Runs as a stdio process, a local Streamable HTTP server, or the public hosted endpoint above.\n\n### Tools\n\n| Tool | Description |\n|:---|:---|\n| `osv_query_package` | Query known vulnerabilities for a single package version by name, ecosystem, and version |\n| `osv_query_batch` | Batch vulnerability query for an array of package tuples — one call for a full dependency list or SBOM audit |\n| `osv_get_vulnerability` | Fetch the full advisory record for a single OSV vulnerability ID |\n| `osv_list_ecosystems` | Return the list of supported ecosystem identifier strings |\n\n## Capability reference\n\n### `osv_query_package` tool\n\n- Accepts `name`, `ecosystem` (case-sensitive exact match), and `version` — an exact version string, not a range\n- Surrounding whitespace is trimmed from all three before the request, and `queryMeta` echoes the trimmed values; interior whitespace (`Rocky Linux`) is kept. Blank or whitespace-only values are rejected before any upstream call\n- Returns matching advisories with OSV IDs, CVE `aliases`, severity entries (CVSS vectors, Ubuntu priorities), `severityLabel` with its `severitySource`, `fixedVersions`, `affectedRanges` (SEMVER/ECOSYSTEM/GIT), and `cweIds`\n- `fixedVersions` lists every fix the advisory records for the queried package (one per affected interval), matched the way OSV matches the query — release-suffixed ecosystems (`Debian` → `Debian:12`, `Ubuntu:22.04` → `Ubuntu:22.04:LTS`) and PEP 503 names on PyPI. Other packages' fixes and GIT commits stay out of it; `affectedRanges` keeps every range\n- `truncated: true` means OSV paginated beyond `OSV_QUERY_MAX_PAGES` (default 10) — an empty `vulns` array with `truncated: true` is NOT a confirmed clean result\n- Typed `invalid_ecosystem` error when the ecosystem string isn't recognized by OSV — call `osv_list_ecosystems` for valid values, then retry\n- `aliases` on each vuln chain to `nist-nvd-mcp-server` for CVSS base scores, EPSS exploitation probability, and CISA KEV status\n\n---\n\n### `osv_query_batch` tool\n\n- Accepts an array of `{name, ecosystem, version}` tuples, 1–1000 per call; `results[i]` corresponds positionally to `packages[i]`\n- Each row's fields are trimmed of surrounding whitespace the same way as `osv_query_package`, and `results[i]` echoes the trimmed values; a blank field in any row rejects the call\n- Per-package `vulnerable`, `vulnCount`, `vulns` (with `aliases`, `severityLabel`, and the row package's `fixedVersions`), and a nullable `error` — one bad ecosystem or upstream failure fails only that row, not the whole batch\n- Aggregate `summary`: `totalPackages`, `vulnerableCount`, `cleanCount`, `truncatedCount`, `errorCount`, `totalVulns`, `worstSeverity`\n- `cleanCount` excludes truncated rows — a per-package `truncated: true` result is never counted clean even with zero findings\n- Per-package requests run in parallel, capped by `OSV_BATCH_CONCURRENCY` (default 10)\n\n---\n\n### `osv_get_vulnerability` tool\n\n- Accepts one exact, complete advisory ID from any OSV source database, matched case-sensitively — `GHSA-` (GitHub), `PYSEC-` (PyPI), `RUSTSEC-` (Rust), `GO-` (Go), `DSA-`/`DLA-` (Debian), `USN-` (Ubuntu), `RHSA-` (Red Hat), `CVE-`, and the rest. IDs come from `osv_query_package` / `osv_query_batch` results\n- Surrounding whitespace is trimmed before the request (`\" GHSA-29mw-wpgm-hmr9 \"` resolves); input that can't be an OSV ID (wildcards, a bare package name, a prefix with no ID) is rejected before any upstream call, with a message naming the expected form\n- Returns the full record — `details` text, all CVE `aliases`, every affected package with its version ranges, ordered `fixed` events, and any package-level severity, severity entries with `severityLabel` and `severitySource`, `cweIds`, and `references` (ADVISORY, FIX, REPORT, etc.)\n- Typed `vulnerability_not_found` error when the ID doesn't exist in OSV — the recovery covers case and the Debian/Ubuntu/SUSE revision suffix (`DSA-5678-1`, not `DSA-5678`); a CVE-style alias may still resolve via `nist-nvd-mcp-server`\n- `withdrawn` is present only on retracted advisories — treat as no longer active, not as an error\n\n---\n\n### `osv_list_ecosystems` tool\n\n- No input; returns the static list of valid `ecosystem` identifier strings plus an advisory `note` on currency\n- Ecosystem strings are case-sensitive exact matches — `\"pypi\"` fails where `\"PyPI\"` succeeds\n- Every ecosystem in the OSV schema's `ecosystemName` enum that OSV.dev accepts at query time, plus `GIT` (accepted via the `ecosystemWithSuffix` pattern); a schema ecosystem OSV.dev still rejects is left out. The `note` carries the verification date; the list may lag later additions\n\n## Features\n\nBuilt on [`@cyanheads/mcp-ts-core`](https://github.com/cyanheads/mcp-ts-core): stdio and Streamable HTTP transports, pluggable auth (`none` / `jwt` / `oauth`), swappable storage (`in-memory`, `filesystem`, `Supabase`, `Cloudflare KV/R2/D1`), structured logging with optional OpenTelemetry tracing.\n\nOSV-specific:\n\n- No API key required — OSV.dev is fully public, keyless, and has no published rate limit\n- `osv_query_batch` issues parallel per-package requests (capped by `OSV_BATCH_CONCURRENCY`) and returns full records, including `aliases`, that the upstream OSV batch endpoint omits\n- Per-package failures are isolated in `osv_query_batch` — one invalid ecosystem or upstream error surfaces as that row's `error` without failing the whole batch\n- Ecosystem discovery via `osv_list_ecosystems` — the OSV schema's ecosystems that OSV.dev accepts, checked against both with `bun run check:ecosystems`\n\nAgent-friendly output:\n\n- `aliases` (CVE IDs) surfaced on every vuln entry — the composition point for chaining to `nist-nvd-mcp-server` for CVSS base scores, EPSS, and CISA KEV status\n- `severityLabel` from the first source that yields one: `database_specific.severity` (GHSA, openEuler, and others; `Medium` reads as `MODERATE`), an Ubuntu priority, then the highest CVSS v3/v4 score computed from the vector as published (every metric group of a CVSS 4.0 vector; base and temporal for CVSS 3.x). Package-level severity counts when the record has none. `severitySource` names the entry used, with the computed score for CVSS; both are `null` rather than fabricated when no source yields a label\n- Truncation is never silently treated as clean — `truncated` (single query) and per-package `truncated` plus `truncatedCount` (batch) flag incomplete OSV pagination, and truncated rows are excluded from `cleanCount`\n- Query echo (`queryMeta` / `effectiveQuery`) and aggregate batch `summary` (`worstSeverity`, `vulnerableCount`, `cleanCount`) let agents verify requests and triage without reading every row\n- Advisory text is framed as untrusted data in `content[]` and escaped at the render boundary: tag-shaped text (`