Presend dependency checks

io.github.presendapp/presend-deps · v1.0.0 · developer-tools

Presend dependency checks is healthy: it completed an MCP handshake in 824 ms and exposes 5 tools.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

Endpoint: https://presend.pages.dev/mcp-deps (streamable-http)

Repository · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count5
Latency824 ms
Last checked (UTC)2026-10-15T08:10:13.639Z

Health history

Checked (UTC)StatusLatencyError
2026-10-15T08:10:13.639ZHealthy824

Tools (5)

maintainer_change_checkPublisher-change analysis is npm only. Also reports whether the package exists (found) and its age (first_published, package_age_days, new_package if first published less than 30 days ago), for npm and for PyPI; on PyPI only existence and age are available. Flags a previously unseen human publisher
repo_health_checkMaintenance signals for a GitHub repository given as owner/name: stars, forks, open issues, license, archived and fork flags, creation date and age, days since last push, topics. Use it to judge whether a dependency looks maintained or abandoned. For an npm or PyPI package whose repository you do no
supply_chain_checkCall this before installing or adding a package (npm install, pip install, a new entry in a manifest), especially one whose name you recalled or that a model suggested. One-call risk check: combines vulnerability_check (OSV.dev), typosquat_check, maintainer_change_check (npm only) and repo_health_ch
typosquat_checkCall before installing a package whose name you typed or recalled. Checks whether an npm or PyPI package name is a near-miss of a well-known package (typosquatting), with an edit-distance threshold scaled to name length; names of 3 characters or fewer are not fuzzy-matched. Uses a curated list of po
vulnerability_checkChecks a package (optionally a specific version) against OSV.dev for known vulnerabilities: npm, PyPI, Go, crates.io, Maven, RubyGems, Packagist and NuGet. For npm and PyPI, a name that does not exist returns found: false and vulnerable: null, never a clean result. Use supply_chain_check for a combi