FaceabotCapability network for AI agents
AppConnect your agent
‹ Back

Catalog › io.github.brunckel/dependency-vuln-check

Is Dependency Vulnerability Check (OSV) reliable?

Private (key required) Dependency Vulnerability Check (OSV) answers but requires credentials, so Faceabot cannot test it anonymously. It is not counted as failing.

Last check: 2026-10-24 19:05 UTC · answered in 1323 ms · remote (no install)

Proven alternatives that work right now

landmine Reliable (measured) · 100%
Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents. · https://landmine.tech/mcp

Vigía Flaky · 75%
What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP. · https://vigia.coredls.cloud/mcp

Picked from Faceabot's live measurements. Or let Faceabot choose: GET https://faceabot.com/resolve?need=…

En français : Accès privé (clé requise). Faceabot teste cet outil lui-même, en continu, sans dépendre de ce que son auteur affirme.

What it does

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Source: official MCP registry (registry.modelcontextprotocol.io) · version 0.1.0 · publisher website
Connect your agent
{
  "mcpServers": {
    "dependency-vuln-check": {
      "url": "https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check"
    }
  }
}
Or ask Faceabot first: MCP tool check_reliability {"id":"io.github.brunckel/dependency-vuln-check"} on https://faceabot.com/api/mcp.
Does it actually do the job?

Not tested with a real task yet. Faceabot only runs real tasks on tools that declare themselves read-only (readOnlyHint), with a neutral sample input.

Faceabot measurements
WhenAnswersReal taskLatency
2026-10-24 19:05 UTC❌ auth_required1323 ms
Method: MCP initialize then tools/list from Faceabot (FaceabotProbe/1.0), plus one read-only tool call with a neutral input when the server declares one, repeated over time. This checks that the server is up and speaks MCP correctly; it does not certify the quality or safety of each tool. How measurement works.

More from the same publisher

Contractor License Watch (OR CCB + WA L&I) Private (key required)

Oregon CCB and Washington L&I contractor license status, expiry dates, and changes via Apify.

MCP endpoint : https://mcp.apify.com/?tools=implementable_antler/contractor-license-watch · website · measurements and details
CVE Exploit Priority (CISA KEV + EPSS) Private (key required)

CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.

MCP endpoint : https://mcp.apify.com/?tools=implementable_antler/cve-exploit-priority · website · measurements and details

Find tools similar to Dependency Vulnerability Check (OSV) →

Publisher of Dependency Vulnerability Check (OSV)?

Show your measured reliability on your README or website:

Faceabot reliability badge for Dependency Vulnerability Check (OSV)

[![Measured by Faceabot](https://faceabot.com/badge/io.github.brunckel/dependency-vuln-check.svg)](https://faceabot.com/tools/io.github.brunckel/dependency-vuln-check)
Data in JSON: /api/catalog?id=io.github.brunckel/dependency-vuln-check · Stop probes: POST /api/reliability/opt-out

AI agents: all of this is available without keys over MCP https://faceabot.com/api/mcp · HTTP https://faceabot.com/api/catalog?q=… · Guide : llms.txt

Best tool by topic · Pulse: what is changing in agent commerce · Is your store ready for AI shopping agents? · State of MCP (weekly) · MCP server doctor · Reliability data · Faceabot app · Faceabot → AI assistants · What AI agents cannot find yet · Add Faceabot to your AI · Badge for tool publishers · Help · Privacy · Terms