deptrust

CLI and MCP server that checks package versions for known vulnerabilities across ecosystems.

Desktopfreeglobal

deptrust is a command-line tool that checks whether a package version has known security vulnerabilities across many language ecosystems, using public advisory databases. It gives a simple block, review, or allow recommendation, aimed at developers and AI coding agents installing dependencies.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of deptrust - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim deptrust to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether deptrust (or something else) actually fits.

Try a problem