Software packages and vulnerabilities for AI agents

Latest versions, deprecation, licences and links for npm, PyPI, crates, Go, Maven, NuGet and RubyGems packages; known vulnerabilities for one package or a whole dependency list (OSV). Call it from any agent over MCP or REST, no key needed to start.

Connect

MCP server (Streamable HTTP): https://ukdata.reliness.co.uk/mcp/software-supply-chain

claude mcp add --transport http software-supply-chain https://ukdata.reliness.co.uk/mcp/software-supply-chain

{
  "mcpServers": {
    "uk-data": {
      "url": "https://ukdata.reliness.co.uk/mcp/software-supply-chain"
    }
  }
}

Tools

package_info

Latest version, publish date, deprecation, licences, advisories and links for a package (deps.dev). 1 credit.

vuln_check

Known vulnerabilities (OSV) for a package@version or a list of up to 500 (array of {ecosystem,name,version} or text "name@version" per line), with severity and fixed versions. 2 credits.

Every caller gets 25 free credits a day without a key. For more, get a free key with 300 credits at ukdata.reliness.co.uk. All tools: UK data tools for AI agents.