Dependency Freshness Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Dependency Freshness Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Dependency Freshness Checker tells any AI coding agent whether an npm or PyPI package is outdated (out of date) — and gives the cited facts to prove it: the latest version, release dates, deprecation status, how many versions behind you are, and a dated "what changed since your version" breaking-change diff. It is MCP-native, reads only public registries and GitHub releases (no scraping, no ToS risk), and is priced Pay-Per-Event for pay-as-you-go agent use.
Give it any npm or PyPI package — optionally with the version your agent is assuming — and the Dependency Freshness Checker returns, citations-first:
Every field carries a source URL and access date, so an agent can trust — and quote — the result.
LLM coding agents are time-blind: their training is frozen, so they emit 70–90% deprecated package code. Coding agents are the largest agent population, and they all share this blind spot. The Dependency Freshness Checker fixes the frozen-training-cutoff problem at call time. It lives in the proven-demand "freshness for agents" lane but stays narrow and legally clean — it reads only public npm, PyPI, and GitHub releases — so it does not fight first-party RAG browsers or funded incumbents.
Pass a small list of packages. Defaults are kept low so a first run is cheap, fast, and succeeds:
{
"packages": [
{ "ecosystem": "npm", "name": "zod", "currentVersion": "3.22.0" },
{ "ecosystem": "pypi", "name": "fastapi" }
]
}currentVersion is optional — omit it to just ask "what's latest?". See .actor/input_schema.json for the full schema.
Each result includes isOutdated, versionsBehind, latest + latestPublishedAt, a dated changeSummary[], and field-level citations[]. The same shape is returned by a batch run and by the MCP tool, so agents and dashboards consume one format.
This Actor exposes one MCP tool, `check_dependency_freshness(packages)`. Three ways to reach it (mechanics cited in docs/research/50-mcp.md):
at https://mcp.apify.com — no extra wiring.
MCP endpoint at /mcp on its own stable URL:
{
"mcpServers": {
"dependency-freshness": {
"url": "https://<user>--dependency-freshness-mcp.apify.actor/mcp",
"headers": { "Authorization": "Bearer <APIFY_TOKEN>" }
}
}
}MCP client at the compiled entrypoint:
{
"mcpServers": {
"dependency-freshness": {
"command": "node",
"args": ["/abs/path/dependency-freshness-mcp/dist/mcp/stdio.js"],
"env": { "GITHUB_TOKEN": "ghp_… (optional, raises GitHub rate limit)" }
}
}
}Inspect locally with npx @modelcontextprotocol/inspector node dist/mcp/stdio.js.
The Dependency Freshness Checker uses Pay-Per-Event pricing, built for pay-as-you-go agent use: a small flat fee per run start plus $0.005 per package checked ($5 / 1,000) — inside Apify's recommended $1–10 / 1,000-results band. You only pay for packages actually checked.
Does it scrape websites? No. It reads only public registry APIs and GitHub releases — no scraping, no terms-of-service risk.
Which ecosystems are supported? npm and PyPI today.
Do I need a GitHub token? No — it is optional and only raises the GitHub rate limit for heavier batches.
Can an agent call it directly? Yes — that is the point. Use the check_dependency_freshness MCP tool (option A or B above).
More agent-native data Actors are on the way on the Apify Store. Follow the author profile to see new freshness-for-agents tools as they ship.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.