NPMScan for Cline
io.github.salemalem/npmscan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
client:Cline
transport:streamable-http
tools:23
Install NPMScan in Cline
~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json · windows: %APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json
{
"mcpServers": {
"npmscan": {
"url": "https://npmscan.com/api/mcp"
}
}
}Cline's MCP Servers pane edits this file for you if you would rather not find it. Cline docs
What Cline can do once it is connected
- search_packages
- get_package
- get_package_version
- get_maintainer_profile
- query_vulnerabilities
- batch_query_vulnerabilities
- get_latest_advisories
- get_cve
- analyze_install_script
- analyze_transitive_dependencies
- check_package_provenance
- check_maintainer_changes
- check_maintainer_blast_radius
- check_license_compliance
- diff_dependencies
- prioritize_remediation
- simulate_dependency_upgrade
- suggest_alternative
- compare_packages
- audit_github_repository
- get_remediation_playbook
- generate_sbom
- enrich_npm_audit