Skip to content
mcp/harbor
VS Code

package risk for VS Code

io.github.makosddavid/package-risk

Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.

client:VS Code transport:stdio runtime:npm

Install package risk in VS Code

.vscode/mcp.json 

{
  "inputs": [
    {
      "type": "promptString",
      "id": "evm-private-key",
      "description": "EVM_PRIVATE_KEY",
      "password": true
    }
  ],
  "servers": {
    "package-risk": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@makosdav/package-risk-mcp"
      ],
      "env": {
        "EVM_PRIVATE_KEY": "${input:evm-private-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

package risk in other clients

package risk MCP server