- Code Impact @vk0dev/code-impact-mcpDependency graph and blast-radius analysis for local TypeScript/JavaScript repos.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Veris @vighriday/verisBehavioral verification intelligence for AI coding agents. 17 MCP tools. Local-first. MIT.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Threadctx @threadctx-dev/threadctx-mcpShared memory MCP server for AI coding agents — local by default, team-shared via threadctx.dev.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- karst @moin105/karstCode context for AI dev tools: pack-scoped, cited code retrieval over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Memdocs @silversurfer562/memdocsGit-native project memory for AI assistants with enterprise-grade audit compliance9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- GhostFree @shane-js/ghostfreeMCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Corral @sebastienrousseau/corralSearch code and symbols across every clone in your Corral workspace. Zero network calls.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Revibe @selvatuple/revibe-mcpAnalyze any codebase — get architecture, file roles, execution flows, and agent context.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Presence @sara-star-quant/presence-mcpRead-only MCP access to presence: living project model and outcome telemetry.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Arcwall Security @rom-baro/arcwall-securitySecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Dev Workflow MCP Server @programinglive/dev-workflow-mcp-serverMCP server to enforce development workflow discipline5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ark @pedroknigge/arkArchitecture co-pilot for AI TypeScript (write gate, CI, plan/loop)Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Aiglare @nugehs/aiglareAudit AI/LLM features for governance guardrails: confidence, fallback, validation, human-in-loop.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ucn @mleoca/ucnAuditable, conserved AST code intelligence for AI agents. JS/TS, Python, Go, Rust, Java, C/C++, C#.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- dotrepo @maxwellsantoro/dotrepoTrust-aware repository facts for agents: build, test, docs, license, and security, no scraping.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Lema @lemahq/lema-mcpCited 'why was this decided?' answers for your repo and for React, Kubernetes, and Rust.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Coverctl @klarlabs-studio/coverctlGo code coverage analysis tool with MCP server for AI-powered coverage workflows4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Project Memory @kaaustubh/project-memory-mcpPersistent memory for AI coding agents — past bugs, decisions, and your corrections, in your repo.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Secrets Audit @eltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Git Enhanced @davidweb3-ctrl/git-enhancedEnhanced Git MCP Server - Code review, commit analysis, and branch management5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Verified Repo Memory @cognitivemyriad/verified-repo-memoryStale-proof repository memory with citations + just-in-time verification + TTL (repo-scoped).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- commit-check MCP @commit-check/commit-check-mcpCommit policy as code for AI agents: check commit messages, branch names and authors before a push3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Audit @commitshow/auditScore a public GitHub repo 0-100, or search Legit.Show for launched software by what we measured.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Devflow @cocaxcode/devflow-mcpMCP server connecting Jira (Cloud + Server) with GitHub/GitLab. Branches, issues, PRs, flows.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
