{"serverId":"mcp-registry/dev.kaneky/depcheck","tools":[{"name":"check_packages","fixed":{"name":"check_packages","description":"Look up the known vulnerabilities affecting exact package versions in the public OSV database (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Pub, Hex), 1 to 50 packages per call. Per package: every OSV advisory for that version with its id, CVE/GHSA aliases, summary, severity (database label, CVSS vectors, v3 base scores), the versions that fix it or \"no fix published\", published/modified dates and a link. Plus a summary: packages checked, packages vulnerable, total advisories and","inputSchema":{"type":"object","required":["packages"],"properties":{"packages":{"type":"array","items":{"type":"object","required":["ecosystem","name","version"],"properties":{"name":{"type":"string","maxLength":214,"minLength":1,"description":"As the ecosystem names it: lodash, requests, github.com/gin-gonic/gin, org.apache.logging.log4j:log4j-core."},"version":{"type":"string","maxLength":128,"minLength":1,"description":"The exact version, not a range."},"ecosystem":{"enum":["npm","PyPI","Go","Maven","crates.io","RubyGems","NuGet","Packagist","Pub","Hex"],"type":"string","description":"OSV's ecosystem name, case-sensitive."}}},"maxItems":50,"minItems":1}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":337,"tokensAfter":337}],"toolsChanged":1,"tokensSaved":0,"todo":[{"tool":"check_packages","params":["packages"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}