MCP server for npm: search packages, get info, audit dependencies, check bundle size, compare packages Install: npx @rog0x/mcp-npm-tools
SaferSkills independently audited Mcp Npm Tools (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server providing npm and Node.js package management tools for AI agents.
Search the npm registry for packages by keyword. Returns name, description, version, weekly downloads, and last publish date.
Get detailed information about a specific npm package: all published versions, dependencies, maintainers, repository URL, license, unpacked size, npm quality/popularity/maintenance scores, and weekly download count.
Analyze a package.json file to find outdated dependencies (compares pinned/range version against latest), deprecated packages, and known security vulnerabilities via the npm bulk advisory API.
Estimate the bundle size of an npm package using the Bundlephobia API. Returns minified size, gzipped size, dependency count, and tree-shaking support indicators.
Compare two or more packages side by side across multiple dimensions: weekly downloads, bundle size, number of runtime dependencies, last publish date, GitHub stars, and license.
npm install
npm run buildAdd to your claude_desktop_config.json:
{
"mcpServers": {
"npm-tools": {
"command": "node",
"args": ["D:/products/mcp-servers/mcp-npm-tools/dist/index.js"]
}
}
}npm run build # compile TypeScript
npm start # run the serverMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.